Google Workspace - Password Vaulted Apps

Password vaulted Apps in Google Workspace or in cloud identity is a kind of password manager which is managed by your Google Workspace admin or your cloud identity admin.

Google Workspace supports Single Sign-On for apps that use the standard SAML but, there are thousands of apps which don't support SAML and require the credentials for sign-on.You can use the password vaulted apps service to manage the access to these apps that don't support SSO and are not based upon SAML. 

The PVA (password vaulted apps) function provides the login credential sets for applications and adds those login credential sets to users with groups. Users can access one of these applications with a group. Users can sign in to the application through the dashboard. This functionality is available with the Chrome or Firefox extensions and plugins.

The PVA feature is available with Google Workspace Enterprise Edition and Cloud Identity Premium edition.

Features and Benefits 

1. Saves time 
2. Centralized Credentials Management
3. Group based App Assignment
4. Logging and Reporting

Working 

1. Create a new group of users for password vaulted apps
2. Configure the password vaulted apps in the Admin console
3. Assign the password vaulted apps to the apps 
4. Add login credentials 
5.  Provide the access for apps to users or groups

1. Create a new group of users for password vaulted apps

You have to create a new group in the Google Admin console specifically for password vaulted apps and add the users to this new group. It makes the users better experience as they access password vaulted apps on the user Dashboard. This group will be the containers for setting up group assignments for users.

Kindly take a note that as an admin when you change passwords in third-party apps, you also have to update the passwords in the Google Admin console at Apps under Password Vaulted apps.

Add apps from the app library

1. Login to the Google Admin console
2. From the menu in the upper-left side of the page, click on Apps then click on Password vaulted apps
3. Click on Add App
4. To check the list of available apps, search with a name for the app and it will show the list of matching apps
5. Now click over the app which you want to add, and click on Add App
6. Enter the app details like App name and enter both the app name and a Login URL
7. Click on Add App

8. Click on Assignments to assign a group or users to the app
9. Click on Grant access after you select a user or group

Add credentials

1. Login to the Google Admin console
2. From the menu in the upper-left side of the page, click on Apps, then click on Password vaulted apps
3. Now select one of the apps on the password vaulted apps page
4. Click on the Credentials panel
   If the credentials associated are not added to the app, click Add credential
   If it shows the list with multiple credentials. then click on Add credential at the top of the page
5. In the Label field, add the name for the credential
6. Add the username and password
7. Click SAVE

Also you can Edit and delete the credentials from the same panel.

1. Login to the Google Admin console
2. From the menu in the upper-left side of the page, click on Apps then click on Password vaulted apps
3. Select the desired apps from the password vaulted apps page and click on the Credentials panel
4. Select the credentials which you want to edit and click on the Edit option on the right side of the page
5. You can make the changes to the Label, Username, and/or Password from the Edit credential page
6. Kindly take note that you should Update the password in the application before saving the changes from enlisted steps
7. Click on the Save button

Allow the access to users or groups

You can apply the same login credential for an application to all users in a group.Also you can assign apps with individual credentials, which enables users to add their own username and password to the application.

1. Login to the Google Admin console
2. From the menu in the upper-left side of the page, click on Apps, then click on Password vaulted apps.
3. Select the desired apps from the password vaulted apps page and click on the Assignments panel.
4. Search for the group from the panel on the left side of the page that you set up and assigned  specifically for password vaulted apps and click on that group.
5. You can add the individual users login credentials to configure this app. Also if you want to assign the same username and password to all users in this group to access this app, then click on Same credential for everyone.
6. Click on the Grant Access button

References: Google Support official website