Google Workspace Changes

New independent security verification badge for select apps in the Google Workspace Marketplace.

Beginning today, you’ll see a new independent security verification badge for select apps in the Google Workspace Marketplace. This badge indicates that the app was validated by an independent security assessor to meet the integration and security requirements, as outlined in Tier 3 of the Cloud Application Security Assessment.

If you’re a Google Workspace admin, you can now track the carbon footprint and gross emissions of using Google Workspace.

If you’re a Google Workspace admin, you can now track the carbon footprint and gross emissions of using Google Workspace. This means you can track the emissions impact of tools such as Google Meet, Gmail, Google Docs, and more.

Duet AI for Google Workspace Enterprise is now generally available.

From the beginning, Google Workspace was built to allow you to collaborate in real time with other people. And with the launch of Duet AI, we’re making it possible to collaborate just as easily with AI. Duet AI is a powerful collaborator that can act as a coach, thought partner, source of inspiration, and productivity booster

Introducing AI-powered writing features that help you quickly refine existing work or get you started with something new in Google Docs and Gmail using Duet AI for Google Workspace.

We’re introducing AI-powered writing features that help you quickly refine existing work or get you started with something new in Google Docs and Gmail using Duet AI for Google Workspace. On web and mobile, you can draft and reply to messages in Gmail. Using Help me write in Docs, simply type a few words describing a topic you’d like to write about and a draft will be instantly generated for you.

Google Workspace for Education Admins must review and confirm access settings for third-party configured apps by Oct 23, 2023.

Through the app access control settings, we’re making it easier for Google Workspace for Education admins to control how third-party apps access their organizations' Google data when users sign-in using their Google Workspace for Education accounts.

Enhanced third-party app access controls for users designated as under 18 in Google Workspace for Education.

Google Workspace for Education admins now have enhanced controls to manage how third-party apps access organizational data for users designated as under 18. Users under 18 are required to request access to apps that are not already configured as trusted, limited, or blocked, although admins can allow users to skip this request for apps that only require basic profile information. Admins can now configure these settings by organizational units and must review and confirm existing third-party app settings by October 23, 2023, to ensure uninterrupted access for users under 18.

Alert Center notifications for Apple push certificates.

To help you stay on top of their renewal period and take action in a timely manner, we will: Notify you via the Alert Center and email when: Your certificate is 30, 10, and 1 day from the date of expiration. Your certificate has expired.

Stronger protection for sensitive Google Workspace account actions

There are now stronger safeguards for sensitive actions taken in your Google Workspace account. These apply to actions that, when done by hijackers, can have far reaching consequences for the account owner or the organization it belongs to.

Context-Aware Access remediator provides more context for access denials

Admins using Context-Aware Access can now provide more information to end users when their access is blocked using the user remediation feature. This feature will help end users quickly understand what steps they need to take to re-access Google Workspace.

Send group membership information in outbound SAML responses

We’re adding the ability for admins to configure and send group membership information as part of SAML responses.

Set up SSO profiles for multiple third-party identity providers with the Multi-IdP SSO beta launch

You can further customize authentication by setting up single sign-on (SSO) profiles for multiple identity providers and then configuring authentication for each group or OU.

Use a new enterprise certificate condition to set context-aware access rules for company-managed devices

When configuring context-aware access rules, you can now use a new signal to determine whether a device is company-owned.

When configuring context-aware access rules, you can now use a new signal to determine whether a device is company-owned.

When configuring context-aware access rules, you can now use a new signal to determine whether a device is company-owned. By using new enterprise certificates as an alternative context-aware signal to determine if a device is a company-managed asset, you can set more specific context-aware policies that are appropriate based on the trustworthiness of the device.

Admins can now install Google Workspace Marketplace applications for specific groups.

Google Workspace admins can now use the 'admin-install' functionality to install Marketplace applications for specific groups within their organization. Previously, admin-installing applications was only possible for organizational units or an entire domain, but this update allows for more granular distribution to specific subsets of users, such as sales, marketing, or legal teams.

Assign SSO profile to organizational units or groups with the SAML Partial SSO feature, now generally available

This feature is now generally available and allows admins to specify groups or organizational units (OUs) to authenticate a subset of your users using Google.