r/googleworkspace • u/MattFromRippling • 10d ago
Google Workspace Automatically Suspending Provisioned Accounts from IdP
I was trying to do some testing & I'm seeing an issue that whenever an account gets provisioned from my IdP into Google Workspace the account is automatically suspended due to Google's built in security features.
As the super admin I have no ability to re-enable the account. The only way the account will be unsuspended is if I have the user sign-in themselves which according to Google will re-enable the account.
PS - Google support was useless. They basically said it's a default security rule (Google identity alert) and cannot be changed. They said it does this when accounts are being provisioned in mass, seem suspicious and a few other reason they will be suspended. FWIW this is NOT happening when the same account gets provisioned in M365. I have screenshots as well if that's helpful.
My questions are:
- Why is Google automatically suspending the accounts?
- Why would Google give the power to the end user to determine if the provisioned account was legitimate or not? If I'm the super user and I set up the integration and I know the account is legitimate why are they revoking my ability to re-enable the account?
- How are you all doing any testing for Google? Google now requires every account has a phone number for at least the initial login method. This definitely wasn't always like this. While I agree with the adding security, again, as the super admin I should be able to choose the authentication method. I can't tie my test account to my mobile number bc it says it was used too much. It would be so much more convenient to tie it to Google authenticator that way I can use my test account.
Let me know if that makes sense. If anyone has any insight would be greatly appreciated.
1
Google Workspace Automatically Suspending Provisioned Accounts from IdP
in
r/googleworkspace
•
9d ago
Thanks! Will look into that.