Google Cloud Directory: FAQs
General FAQs
This functionality is available for organizations using:
-
Google Workspace Education
-
Google Workspace Enterprise for Education
-
Google Workspace Enterprise
-
Cloud Identity Premium.

Google Cloud Directory makes user and group details available via the industry standard and well established LDAPThe Lightweight Directory Access Protocol (LDAP) is a directory service protocol that runs on a layer above the TCP/IP stack. It provides a mechanism used to connect to, search, and modify Internet directories. The LDAP directory service is based on a client-server model. protocol.
PaperCut NG/MF makes use of a standard set of LDAP commands (for example, searches, binding, and attributes).
This traffic is encrypted and requires a client-based certificate that is generated by an organization's Google Administrator.

All traffic between the Application server and the Google Cloud Directory LDAP service is encrypted and requires a client based certificate for authentication.
No username and password is required to integrate PaperCut NG/MF with Google Cloud Directory.

The way your internal users are handled when you switch over to Google Cloud Directory depends on the username for the account.
-
If the username for an internal user is the same as a Google Cloud Directory username (without the domain part), then PaperCut NG/MF will convert the existing internal user to a standard PaperCut NG/MF user and merge the data. If there are discrepancies in the data in the existing internal account and Google Cloud Directory, the Google Cloud Directory information will override the existing internal user information.
-
If the username of the internal user is NOT the same as a Goggle Cloud Directory username, the internal user will not be affected. However, if a newly created user has the same Primary email address as an existing account, a warning will be displayed, and the Primary email address in the newly created user will be empty.

PaperCut NG/MF stores information like usernames, names, departments, email addresses, and similar information. It does not store passwords for users whose details are located in Google Cloud Directory.

LDAP is an industry standard protocol that has information like usernames, names, departments, etc. Google Cloud Directory has these fields (and more) with the exception of the Office field.

No. Currently Google Cloud Directory does not support custom fields.

Yes, in PaperCut MF you can set up two sync sources. Your primary sync source will already be Active Directory, so set up Google Cloud Directory as your secondary sync source.