Increase G Suite security with employee ID

In an effort to increase G Suite security, Google has added employee ID to the G Suite login. Admins can now verify users’ identity by asking them to provide their employee ID when they sign in to their G Suite account. This will better protect your users from hijacking attempts, as employee IDs are more difficult to guess and phish than many types of identity challenges.

To enable this security feature, admins have to provide the employee ID. There are three ways to do this:

1. Upload employee IDs directly into the Admin console.
2. Use Google Cloud Directory Sync to pull employee IDs from Microsoft Active Directory or an LDAP server.
3. Use the G Suite Admin SDK Directory API to populate the “externalIds[].type” “organisation” field with employee IDs.

Once this step is done, admins can turn on the login challenge from the Admin console (Security > Login challenges > Use employee ID to keep my users more secure). Please note that the employee ID login challenge is OFF by default and will not be presented to any user with two-step verification enabled.

If you have any questions, please refer to the Login Challenges FAQ page.