Google Workspace Changes

Duet AI for Google Workspace Enterprise is now generally available.

From the beginning, Google Workspace was built to allow you to collaborate in real time with other people. And with the launch of Duet AI, we’re making it possible to collaborate just as easily with AI. Duet AI is a powerful collaborator that can act as a coach, thought partner, source of inspiration, and productivity booster

Introducing AI-powered writing features that help you quickly refine existing work or get you started with something new in Google Docs and Gmail using Duet AI for Google Workspace.

We’re introducing AI-powered writing features that help you quickly refine existing work or get you started with something new in Google Docs and Gmail using Duet AI for Google Workspace. On web and mobile, you can draft and reply to messages in Gmail. Using Help me write in Docs, simply type a few words describing a topic you’d like to write about and a draft will be instantly generated for you.

Google Workspace for Education Admins must review and confirm access settings for third-party configured apps by Oct 23, 2023.

Through the app access control settings, we’re making it easier for Google Workspace for Education admins to control how third-party apps access their organizations' Google data when users sign-in using their Google Workspace for Education accounts.

Enhanced third-party app access controls for users designated as under 18 in Google Workspace for Education.

Google Workspace for Education admins now have enhanced controls to manage how third-party apps access organizational data for users designated as under 18. Users under 18 are required to request access to apps that are not already configured as trusted, limited, or blocked, although admins can allow users to skip this request for apps that only require basic profile information. Admins can now configure these settings by organizational units and must review and confirm existing third-party app settings by October 23, 2023, to ensure uninterrupted access for users under 18.

Alert Center notifications for Apple push certificates.

To help you stay on top of their renewal period and take action in a timely manner, we will: Notify you via the Alert Center and email when: Your certificate is 30, 10, and 1 day from the date of expiration. Your certificate has expired.

Stronger protection for sensitive Google Workspace account actions

There are now stronger safeguards for sensitive actions taken in your Google Workspace account. These apply to actions that, when done by hijackers, can have far reaching consequences for the account owner or the organization it belongs to.

Context-Aware Access remediator provides more context for access denials

Admins using Context-Aware Access can now provide more information to end users when their access is blocked using the user remediation feature. This feature will help end users quickly understand what steps they need to take to re-access Google Workspace.

Send group membership information in outbound SAML responses

We’re adding the ability for admins to configure and send group membership information as part of SAML responses.

Set up SSO profiles for multiple third-party identity providers with the Multi-IdP SSO beta launch

You can further customize authentication by setting up single sign-on (SSO) profiles for multiple identity providers and then configuring authentication for each group or OU.

Use a new enterprise certificate condition to set context-aware access rules for company-managed devices

When configuring context-aware access rules, you can now use a new signal to determine whether a device is company-owned.

When configuring context-aware access rules, you can now use a new signal to determine whether a device is company-owned.

When configuring context-aware access rules, you can now use a new signal to determine whether a device is company-owned. By using new enterprise certificates as an alternative context-aware signal to determine if a device is a company-managed asset, you can set more specific context-aware policies that are appropriate based on the trustworthiness of the device.

Admins can now install Google Workspace Marketplace applications for specific groups.

Google Workspace admins can now use the 'admin-install' functionality to install Marketplace applications for specific groups within their organization. Previously, admin-installing applications was only possible for organizational units or an entire domain, but this update allows for more granular distribution to specific subsets of users, such as sales, marketing, or legal teams.

Assign SSO profile to organizational units or groups with the SAML Partial SSO feature, now generally available

This feature is now generally available and allows admins to specify groups or organizational units (OUs) to authenticate a subset of your users using Google.

Google for Education transformation reports window is now open with improved access and real-time customization.

Google for Education transformation reports are now available for K-12 Google Workspace for Education customers worldwide. The current reporting window is open from November 2, 2021, to December 10, 2021. Key improvements include immediate access for super admins upon login without a waiting period, the removal of the requirement to request a report in advance, and the ability to adjust product data windows and expected user counts in real time.

Fortanix and Stormshield added as Key access service partners for Client-side encryption

Google has added Fortanix and Stormshield as new Key access service partners. These partners provide tools that integrate with Google's key access service APIs, offering customers dedicated key management and access control capabilities for their encrypted Google Workspace data.