Troubleshooting Google Workspace Integration Issues

In this article

• Connection and authentication errors
• Employee accounts are not being created
• Sync errors
• Group sync failures
• Support

Connection and authentication errors

Issue: You get an Authentication Failed or Invalid Credentials error when uploading your Service Account key.

Solution(s): 

• Ensure the email entered in Deel is a Google Workspace Super Admin. It cannot be the email address of the Service Account itself.

• Ensure the Admin SDK API is marked as Enabled in your Google Cloud Project. If it was recently enabled, it may take 5–10 minutes to propagate.

• Go back to Domain-Wide Delegation in the Google Admin Console. Ensure there are no typos in the 6 required URLs. A single missing comma or character will block the connection.

Employee accounts are not being created

Issue: An employee has started, but their Google email hasn't appeared.

Solution(s):

• Remember that Deel's automatic sync happens once per hour at 40 minutes past the hour. If you hired them at 2:00 PM, the account won't be created until 2:40 PM.

• Check Plugins and settings. If the User Provisioning plugin is OFF, Deel cannot create accounts automatically.

• Google requires a destination to send a temporary password. If the worker's profile in Deel is missing a personal email address, the creation will fail.

• If a worker was hired while provisioning was disabled, they won't have a Google account linked. You must bridge this manually:

  1. Go to People > All People and select the worker.

  2. Go to the Apps tab in their profile.

  3. Click Create Account on the Google Workspace row.

  4. Select when to grant access and click Complete. This manually pushes the account to Google immediately.

Sync errors 

Issue: Job titles or departments aren't updating in Google.

Solution(s):

• Ensure the field you are trying to sync isn't being overwritten by a manual change in the Google Admin Console. Deel is the "Source of Truth"—manual changes in Google may be reverted during the next sync.

• If you are trying to sync a Dynamic Group, the group's email domain must exactly match the primary or secondary domain authorized in your Google Workspace.

Group sync failures

Issue: members aren't appearing in your Google Groups.

Solution(s): 

• Ensure the .../auth/admin.directory.group and .../auth/admin.directory.group.member scopes were both authorized. One allows Deel to see the group. The other allows Deel to change it.

• Ensure the group email address you assigned in Deel isn't already being used by an individual user or a different alias in Google.

Support

If any of the issues persist, contact Deel Support for assistance.