Overview
Connect Viio to your Google Workspace sign‑in audit logs to see exactly which SaaS tools employees access with their corporate Google accounts. The connection is read‑only and sets up in minutes.
Capabilities
Capability | What it means in Viio |
✅ SaaS App Usage | Fetches information about which specific users have used each app |
✅ SaaS Discovery | Discovers Saas apps that are used by your employees. |
Prerequisites
Google Workspace role with audit‑log rights — Super Admin or a custom role that includes Reports > Login privileges.
Admin SDK Reports API enabled for the domain.
Setup
In Viio, open Integrations and choose Google SSO Logs.
Click Connect to Google and sign in with an authorised Workspace admin account.
Review the read‑only scopes Viio requests and click Allow.
Back in Viio, give the connection a descriptive name (e.g. “Acme – Google SSO Logs”) and click Save.
Viio immediately back‑fills up to 90 days of login events. Allow up to one hour for the first sync to finish.
Troubleshooting & FAQ
Issue | Quick fix |
“Insufficient permissions” during consent | Ensure the admin account can access Reports → Audit → Login in the Admin console and that the Admin SDK API is on. |
No data after 24 hours | Check Google Admin console → Security → API controls → App access control and confirm Viio still has admin.reports.audit.readonly access. |
Need data older than 6 months | Google only retains login‑audit data for six months – export to BigQuery or Log Analytics before that window closes. (support.google.com) |
Technical details
Auth method: OAuth 2.0 Workspace domain‑wide consent.
Primary endpoint:
GET /admin/reports/v1/activity/users/all/applications/login(Admin SDK Reports API). (developers.google.com)OAuth scope requested:
https://www.googleapis.com/auth/admin.reports.audit.readonly.Optional scope:
https://www.googleapis.com/auth/admin.directory.user.readonly(to resolve user IDs).Fields stored:
id.time,actor.email,events[].name,ipAddress,oauthClientId.Data flow: One‑way, read‑only from Google Workspace → Viio. Viio never writes to Google.
Google SSO logs integration fetches historical data for 3 months. If in a week after initial integration data is not flowing into Viio, please reach out to [email protected]