DCFG allows syncing between Google Apps and Dropbox Business. DCFG automates provisioning and deprovisioning of both users and groups. DCFG reads users and groups on Google Apps, then create/update/delete Dropbox accounts and groups.
Invite users to Dropbox Business team who are in Google Apps but NOT in Dropbox. Users are identified by primary email address.
Delete users from Dropbox Business team who are NOT in Google Apps but in Dropbox. Users are identified by primary email address.
Create/update Dropbox Groups by refering Google Group. Google Group can have nested groups, DCFG expands all nested group, then add all members to Dropbox Group. In some usecase, Google Groups have tons of unmanaged groups. Most IT admins don't want to sync all group into Dropbox. DCFG requires white list of Google Groups (group emali address).
Sample structure of Google Groups.
japan@example.com (Name: Japan)
|
+- taro@example.com (USER)
+- tokyo@example.com (GROUP)
tokyo@example.com (Name: Tokyo)
|
+- kevin@example.com (USER)
If IT admin add japan@example.com
to the white list, DCFG creates Dropbox Group named "Japan". And the group has both taro@example.com
and kevin@example.com
.
- Administrator priviledges required for both Google Apps and Dropbox Business.
- DCFG requires directory for configuration files and writing logs. Create DCFG directory somewhere on your machine.
- Download DCFG binary into DCFG directory
- Login to Google Apps as administrator.
- Create project on Google APIs Portal.
- Enable Admin SDK.
- Create credentials. Select "Admin SDK" for "Which API are you using?", "Other UI (e.g. Windows, CLI tool)" for "Where will you be calling the API from?". Choose "User data" for "What data will you be accessing?".
- Create Client ID.
- Then download client secret JSON file.
- Rename
client_secret_*.json
togoogle_client_secret.json
- Move
google_client_secret.json
to DCFG directory.
- `dcfg -path DCFG directory -auth google
- Open link, which displayed by above command.
- Approve and copy code.
- Paste code into dcfg
- Login to Dropbox Business as team admin.
- Create app on My Apps.
- Choose
Dropbox Business API
- Choose
Team member management
for access type. - Name your app.
- Generate access token by clicking "Generate" button.
dcfg -path *DCFG directory* -auth dropbox
- Paste generated token
Create list of Google Group emails. Format is like below:
japan@example.com
singapore@example.com
DCFG runs as dryrun by default. If you don't need to sync groups, -group-provision-list *white list file*
is not required.
dcfg -path *DCFG directory* -group-provision-list *white list file* -sync user-provision,group-provision,user-deprovision
add option -dryrun=false
$ docker build -t dcfg . && rm -fr /tmp/dist && docker run -v /tmp/dist:/dist:rw --rm dcfg
Copyright (c) 2016 Takayuki Okazaki
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.