Getting started with GarbleCloud CSE for Google Workspace is a quick and painless process. From start to finish, setup takes less than 30 minutes including sync wait time from Google.


Step 1: Purchase GarbleCloud CSE by contacting sales.

To initiate GarbleCloud CSE you may get a 30-Day Free Trial or purchase the product by contacting sales. Once purchased you will receive a subscription key that you will be able to use to set up CSE for your domain. Users with Super Admin Access for your domain will need this key to create your Admin Panel.


Step 2: Log into Admin Dashboard
Once you have obtained the subscription key, log into the Admin Panel here: https://cse.garblecloud.com/login using an email account with Admin capabilities for your domain. You will be prompted to Buy a Subscription or Enter a Code. Here is where you will enter your Subscription key as well as your Email and Phone number.




Step 3: Retrieve KACL URL from Settings in Admin Panel

After you have logged into your Admin Panel, go to the SETTINGS panel and copy the KACL URL below the lockdown mode feature.



Step 4: Go to Google Admin Panel to setup External Key Service and idP

Once in the Admin Panel, go to SECURITY -> ACCESS AND DATA CONTROL -> CLIENT-SIDE ENCRYPTION -> EXTERNAL KEY MANAGEMENT. Here is where you input your KACL URL.

  • Name: GarbleCloud-CSE

  • URL: (Your KACL URL from the GarbleCloud Admin Dashboard)



Step 5: Set up your iDP

Next you will need to set up your Identity Provider. To set up the Identity Provider, fill in each field to match the image below. For more information on how to do this, you can check out this article here. This Identity Provider fallback needs to be activated for CSE to work.

The Client ID for GarbleCloud CSE is: 132976962042-hjj3ht98c6jq7fm05crf7m4g17ufsnof.apps.googleusercontent.com



Step 6: Activate CSE!

In the Google Workspace Admin Panel, you will be able to scroll down to APPS in the Client-Side Encryption tab. Here you can activate each function for CSE once everything is set up above. CSE can be activated at a domain level, meaning the entire domain has the ability to use CSE, or to a specific User Group. You may activate it for a User Group by selecting the group in each App you activate.