Gong allows you to set up automatic provisioning to sync team members between your Identity Provider (IdP) and Gong.
This includes:
Automating this process is the most secure way of ensuring team members can access Gong correctly.
Provisioning users
Once you’ve set up provisioning, the following functionality is supported for all providers:
New users: Users created in the IdP are provisioned in Gong
User updates: Updates made to the user's profile in the IdP are updated in Gong
User deactivation: Deactivating the user or disabling the user's access to the application through the IdP will deactivate the user in Gong
User reactivation: Reactivating a user in the IdP will reactivate the user in Gong
Groups: Users in IdP groups are assigned Gong settings according to the assignment they are mapped to
Supported providers
Gong supports provisioning from the following providers:
What IdP data is provisioned?
Gong can import various fields from your IdP, the following fields are mandatory:
First Name
Last Name
Job Title
Manager which is used to build the company hierarchy. For more details see Team hierarchy.
Configure assignments for IdP groups
Assignments in Gong let you automatically apply Gong settings to users included in that assignment. Each assignment has a corresponding group in the IdP. The Gong settings you can apply to users in your IdP groups are:
Permission profile for each workspace
Method of updating changes in IdP
This eliminates the need for admins to manually assign and maintain these settings for each team member.
Automatic vs manual updates
New users provisioned from the IdP always get the Gong settings as defined in the assignment. Updating team members’ settings can either be managed completely by the IdP and no manual changes can be done in Gong, or partially managed by the IdP, where some settings are enabled.
Automatic: team members’ details are updated in Gong when changed in the IdP. Their Gong settings are updated if they are move to a different team which has a different assignment. The tech admin can’t manually update fields in Gong. If you change the assignment settings, settings for team member’s managed by this assignment are also changed. This method provides the most secure way of ensuring your team members all have the correct access to Gong.
Manual: Only the team member’s first name, last name and manager fields are updated when they are changed in the IdP. Gong settings including the Gong seats, data capture, permission profiles, and consent profile are set once when the user is first provisioned to Gong. After that, you can only change these settings manually.
This means that if a team member moves from one IdP group to another, the company hierarchy in Gong is updated but the team member’s Gong settings aren’t changed and you can manually update them.
This is useful for example, if you maintain generic groups in your IdP instead of creating a different group for each of the Gong settings you want to give to your team members. This requires ongoing maintenance by the tech admin and could result in inconsistencies.
In addition, if you change the assignment settings, team members who have already been provisioned won’t get the new settings.
Assigning permissions with the relevant seats
Certain permissions require a seat for the team member to use a related feature. Team members who have permissions assigned without the relevant Gong seat won’t be able to access these features until the correct seat is assigned. For information on seats, see Plans and seats.