Connecting Google Workspace or Microsoft 365

The one-time setup that lets your people sign in through nCapsule.

Find it at GWS Setup / Office 365 Setup

Connecting Google Workspace or Microsoft 365 in nCapsule

This is the one-time connection between your identity provider and nCapsule. It sets up single sign-on, so your people authenticate through nCapsule and all the sign-in rules — geo-fencing, hours, travel detection — apply to them.

Which page you see depends on the provider set for your primary domain, and the two are genuinely different processes rather than the same steps with different branding. The screenshot above is the Google Workspace flow.

The two flows

Google Workspace

You create a third-party SSO profile in the Google Admin Console: paste in the sign-in and sign-out URLs nCapsule gives you, then download your certificate and upload it there.

Office 365 (Microsoft Entra ID)

You grant Microsoft admin consent as a Global Administrator, then enable federation. nCapsule verifies the domain and configures SSO for you — there are no URLs to paste.

The Office 365 flow. It runs through Microsoft consent rather than the paste-and-upload steps of the Google Workspace version, so follow whichever page your domain actually shows.

You need admin access to the other system too

The steps happen in your Google Workspace Super Admin Console or your Microsoft 365 admin centre, not in nCapsule. For Office 365 you need a Global Administrator account specifically, since it grants consent on behalf of the tenant.

Test with one account before rolling out

Once SSO is live, everyone on that domain signs in through nCapsule. Confirm a single account works end to end before you tell the whole organisation.

Bringing the people across

Connecting the directory does not by itself create the user records. Once this is done, use Users → Sync Users to bring them in.

Before you start

1 Confirm which provider your primary domain is set to — the page follows that.
2 Have admin access to the other system: a Google Super Admin, or a Microsoft 365 Global Administrator.
3 Work through the numbered steps on the page, which shows exactly what to paste where.
4 Test with one account end to end before telling the organisation.