---
schema_version: "1"
id: e737732fa42f01d4356220f58cecb018ed27d3f34d062d638f4e99009d8b0f9f
title: Connection for Google G Suite Users
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/sales/264-0-0/lightning_sync_admin_security_connection_google.md
canonical_url: https://help.salesforce.com/s/articleView?id=sales.lightning_sync_admin_security_connection_google.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 95198536493b9b1f0feeef4a2a206f78bf58534be9e0d58d83543d9e8e4da0b5
description: The Google G Suite connection method is a combination of an OAuth 2.0 and a service account connection. This design is based on a method recommended by Google for connecting server to server.
products:
  - Sales Cloud
  - Cross Cloud
  - Service Cloud Voice
release: "264"
---
# Connection for Google G Suite Users

The Google G Suite connection method is a combination of an OAuth 2.0 and a service account connection. This design is based on a method recommended by Google for connecting server to server.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
      <colgroup>
        <col style="width:33.33333333333333%">
        <col style="width:33.33333333333333%">
        <col style="width:33.33333333333333%">
      </colgroup>
      <thead class="slds-text-title_caps ">
        <tr class="">
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d30597e38">Requirement</th>
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d30597e41">Why it’s required</th>
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d30597e44">Benefit to you</th>
        </tr>
      </thead>
      <tbody>
        <tr class="">
          <td data-label="Requirement" class="slds-cell-wrap" style="vertical-align:top;" headers="d30597e38 ">Your Google admin must establish a service account for your G Suite account. To do so,
            Google admins generate a private key that includes access to your Google contacts and
            calendar API. A Salesforce admin then uploads the key to Salesforce.</td>

          <td data-label="Why it’s required" class="slds-cell-wrap" style="vertical-align:top;" headers="d30597e41 ">
            <p>After Salesforce admins upload the private key, the key provides Salesforce with an
              access token to your company’s Google account. This access is required for read, update,
              create, or delete access to Google contacts or events.</p>
            <p>See Also:</p>
            <ul>
              <li><a href="https://help.salesforce.com/articleView?id=lightning_sync_admin_google_prep_google.htm&amp;language=en_US" target="_blank">Prepare Your Google Account for
                  Lightning Sync</a></li>
              <li><a href="https://help.salesforce.com/articleView?id=lightning_sync_admin_google_prep_sfdc.htm&amp;language=en_US" target="_blank">Prepare Salesforce for Lightning
                  Sync</a></li>
            </ul>
          </td>

          <td data-label="Benefit to you" class="slds-cell-wrap" style="vertical-align:top;" headers="d30597e44 ">
            <p>After they’re uploaded, Google private keys are encrypted at rest. The private key
              signs the outbound sync requests sent from Salesforce. Requests can only be verified with the
              matching public key, possessed by your G Suite account.</p>
            <p style="margin-bottom:0;">The generated access token is
              securely transferred from your Google account to Salesforce over a TLS connection. The token
              is encrypted. Every hour, the access token expires and a new token is transferred, always
              over a TLS connection.</p>
          </td>

        </tr>
      </tbody>
    </table>

#### See Also

- [Lightning Sync System Requirements](https://help.salesforce.com/s/articleView?id=sales.exchange_sync_sys_req.htm&release=264.0.0&type=5 "Confirm that your Microsoft® Exchange-based server or Google Workspace account meet these system requirements before you set up your sales reps for Lightning Sync.")
- [See the Big Picture for Setting Up Lightning Sync for Google](https://help.salesforce.com/s/articleView?id=sales.lightning_sync_admin_google_implement.htm&release=264.0.0&type=5 "Salesforce admins can set up Lightning Sync so reps can sync contacts and events between your company’s G Suite account and Salesforce. Salesforce admins and IT pros complete several steps, both from your company’s G Suite account and from Salesforce.")