Sync users from multiple Google Cloud Directory domains

Before you start

Your users and groups will now be identified by their fully qualified (email address) username to differentiate across domains. Consider your migration and rollback strategy; changing the names of every user in PaperCut can risk duplicate users and losing historical data. You can user server commands to automate renaming users and retain user history.

Before you start you might also like to check the list of limitations at the end of this page.

Set up syncing from multiple domains

Ensure you have PaperCut NG/MF version 20.0 or higher installed.

1. We recommend you back up your system before your start. Just in case.

2. Switch off on-demand user creation to prevent users being duplicated. This can happen when users are identified by their short-form username that doesn’t match the long-form username after migration.

3. Use the Advanced Config Editor to set the following configuration keys:

user-source.gsuite.username-with-domain = Y
system.normalize-network-username = N

1. Set up the Google Workspace (formerly G Suite) sync in the usual way as described in Synchronize user and group details with Google Cloud Directory under Options > User/Group Sync.

1. Click Synchronize now to save and run your changes. New users will be imported by their fully qualified (email address) usernames. Existing users will remain with their short-form username.

2. Migrate your users manually from their existing usernames to email format.

3. If you are transitioning from a single domain to multiple domains, to prevent group name clashes you’ll need to convert your group names to email format. For more information, take a look at Synchronize user and group details with Google Cloud Directory .

   1. Click Convert. The group names automatically transition to email format group names.
      
   2. Re-enter your comma-separated list of domains.

Limitations

We’ve documented these limitations to help you make the right decision for your environment.

• For PaperCut NG/MF versions prior to 23.0.3 there’s a 50-character limit on individual usernames that applies to the fully-qualified email address in multi-domain environments (for example, jsmith@domain.com is a 17-character username).

• There’s a 1000-character limit on the domain input field.

• Synchronizing user and group details might take several minutes for large numbers of domains.

• When filtering imported users by groups, cross-domain group membership is not supported. Users are only imported if they both:

  • are a member of the selected group

  • share a domain with the selected group.