Passwordless sign-in
Employees sign in to Google Workspace with a passkey instead of a password — phishing-resistant by design. Trustaige federates with Google over SAML, so the login your team already knows simply gets safer.
Trustaige · Google Workspace
A phishing-resistant identity layer for Google Workspace
Trustaige sits in front of Google Workspace and hardens it: passkey sign-in that can’t be phished or replayed, conditional-access policy you control, device trust, and an immutable audit trail — plus automatic user and group provisioning so access tracks employment. One guided setup.
What Trustaige adds
Phishing-resistant passkeys
Conditional-access policy
Immutable audit log
Device trust
What Trustaige does for Google Workspace
Three jobs, handled automatically.
Trustaige sits in front of your Google Workspace as the identity layer — issuing phishing-resistant credentials, keeping your directory in sync, and removing access the instant it should be gone.
Automatic provisioning
Manage users and groups in Trustaige, and Trustaige provisions them into Google Workspace for you. Create a group once and it appears in Google with the right members; add someone and their Google account follows — no duplicate data entry.
Instant offboarding
Deactivate someone in Trustaige and the change is pushed straight to Google Workspace — their account is deprovisioned and group memberships removed within seconds, along with their sessions. Access ends when employment does.
How it connects
Live in a single guided flow.
- 01
A Super Admin authorizes the connection
From the Trustaige admin console, a Google Workspace Super Admin grants Trustaige access in one consent screen. Nothing is changed until you confirm.
- 02
Trustaige configures SAML SSO
Trustaige sets up the SAML federation profile for your verified domain automatically, then hands sign-in over to phishing-resistant passkeys.
- 03
Your directory syncs out to Google
Manage users and groups in Trustaige as your source of truth. Trustaige creates and updates the matching accounts and groups in Google Workspace automatically — and removes them when access should end.
Built for security teams
Your directory, kept in sync with Google.
Trustaige is your source of truth: it manages the user and group records — names, work email addresses, and group membership — needed to keep your Google Workspace in sync as your workforce changes. Every account, group, and access decision is recorded in an immutable audit trail you can stream to your own monitoring stack.
Trustaige's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. For full detail on what we collect and how we protect it, read our privacy policy.
- Directory of users and groups
- Names, work emails, org structure
- Group membership and changes
- SAML sign-in configuration
- Immutable audit of every access decision
Start a conversation
If your auth layer is on the agenda,
so are we.
We'll walk through a working deployment, map it to your stack, and tell you honestly where Trustaige fits and where it doesn't. No demo theater. No follow-up cadence.