Overview

Scrut integrates with Google Workspace to streamline vendor discovery, automate access reviews, and strengthen identity governance. The integration automatically imports applications from Google Workspace into Scrut’s Vendor Management module, helping organizations identify vendors, classify them, and assess potential risks. It also provides user-to-application mappings for SSO-based vendors, enabling detailed access reviews. Automated tests verify that Workspace accounts are linked to users, MFA is enforced, and accounts are deprovisioned when personnel leave. By consolidating this data within Scrut’s GRC platform, organizations can reduce manual effort, improve compliance visibility, and stay audit-ready.

Why Connect

• Provide auditors with user-to-app mappings and SSO usage
• Prove MFA and deprovisioning are consistently enforced
• Maintain a complete vendor and app inventory for compliance.

Supported Automated Tests

Scrut provides pre-built automated tests for Google Workspace. Here are a few examples of Scrut’s Google Workspace tests:

• Access reviews completed for all in-scope applications
• Google Workspace accounts associated with users
• Google Workspace accounts deprovisioned when employees leave

Supported Automated Evidence

Scrut automates the collection of some evidences for Google Workspace. Here are a few examples of Scrut’s Google Workspace-driven evidences that can be collected:

• Enabled Multi-Factor Authentication
• Offboarding - Logical Access & Physical Access Revocation
• Reports of User Access Reviews
• User Access Approval list to Application, Infrastructure and Service