Connect your workspace

These steps connect your workspace to deeploi and protect your team's email. Give deeploi admin access first: the email security and SSO steps both require it.

How do I give deeploi admin access?

Giving deeploi admin access lets deeploi create and remove employee accounts, manage app licenses, and handle workspace settings automatically. Select your workspace below.

Adding deeploi as a Global Administrator to Microsoft 365 takes about 10 minutes. You must already be a Global Administrator yourself to grant admin rights to others.

The video below walks through the full setup.

What the video covers

  1. Navigating to user management. Opening admin.microsoft.com and finding the user addition flow.
  2. Creating the deeploi admin account. Entering the required user details and setting the admin email for password delivery.
  3. Assigning the Global Administrator role. Selecting the correct license and role settings.
  4. Completing the invitation. Reviewing and finishing the account creation.

Steps

  1. Go to admin.microsoft.com and sign in with your credentials.

  2. Click + Add user.

  3. Enter the following details:

    FieldValue
    First namedeeploi
    Last nameadmin
    Display namedeeploi admin
    Usernamedeeploiadmin@yourcompanydomain.com
  4. Check these three boxes:

    • Automatically create a password
    • Require this user to change their password when they first sign in
    • Send password in email upon completion

    In the "Email the new password to the following recipients" field, enter customer_admin@deeploi.io.

  5. Select your location (for example, Germany).

  6. Choose "Create user without product license."

  7. Click Admin center access and select Global Administrator.

  8. Click Next, review the details, then click Finish adding.

Screenshots

Step 2: Add user button in admin.microsoft.com

Step 4: Password options with deeploi email address

Step 6: Create without product license selected

Step 7: Global Administrator role selected

How do I secure my team's email?

No email security configuration is 100% effective. Stay vigilant when handling unexpected emails regardless of your settings.

Microsoft 365 includes built-in protection against phishing, malware, and spam. The settings available to you depend on whether you have Business Standard or Business Premium.

How do I access the security settings?

Go to admin.microsoft.com, then navigate to Admin Centers → Security. A new tab opens. From there: Email & Collaboration → Policies & Rules → Threat Policies.

  1. Apply Standard Preset Security Policies. Go to Preset Security Policies and select Standard Protection. This activates Microsoft's recommended baseline protection against spam, phishing, and malware.

  2. Review anti-spam and anti-phishing policies. Standard policies are applied by default. Under Policies, review and adjust them to match your organization's risk profile. Microsoft's documentation covers anti-spam policies and anti-phishing policies in detail.

  3. Configure quarantine policies. Under Policies → Quarantine Policies, set how users interact with quarantined emails and configure notification preferences. Microsoft's quarantine documentation covers the setup.

Business Premium includes advanced anti-phishing controls not available in Standard. If your company handles sensitive data, Business Premium provides significantly stronger protection.

  1. Apply Strict Preset Security Policies for high-risk users. Go to Preset Security Policies and select Strict Protection. Apply this to executives, admins, and others with elevated access.

  2. Define trusted users and domains. In your Anti-Phishing Policies, add trusted internal users and domains. This blocks attackers trying to impersonate your staff or spoof your domain. Microsoft's impersonation insight documentation explains the options.

  3. Configure Safe Links and Safe Attachments. Under Policies → Safe Links and Safe Attachments, enable real-time scanning of URLs and email attachments. Setup guides are available for Safe Links and Safe Attachments.

For broader protection, especially on macOS systems and older Windows versions, ask deeploi about the Security+ add-on. Contact hello@deeploi.io for details.

How do I set up SSO in Google Workspace?

SSO lets your team sign in once and access all connected apps without logging in separately to each. You can use Google as the identity provider, or connect an external one such as Okta or Microsoft Entra ID.

Step 1: Choose an identity provider

Decide whether to use Google directly as your identity provider, or connect an external provider via SAML. Google maintains a list of supported SAML apps at support.google.com.

Step 2: Configure SSO in the Admin Console

  1. Go to admin.google.com.
  2. Navigate to Security → Authentication → SSO with third-party IdP.
  3. Add your SAML identity provider details: sign-in URL, sign-out URL, and certificate.
  4. Save and test the connection.

If you are using Google as the identity provider, no external SAML configuration is needed. Enable SSO with Google as SAML IdP instead.

Step 3: Assign access to users

  1. In the Admin Console, go to Apps → Web and mobile apps.
  2. Assign each app by organizational unit or group.
  3. Verify access for a test account before rolling out broadly.

Checklist before going live

ItemWhy it matters
Set up a backup super admin account with a recovery email not tied to SSOIf the identity provider goes down, you need a way back in
Enforce SSO for all users once testedAvoids a split configuration where some users bypass SSO
Pair SSO with Google 2-Step VerificationSSO alone is not sufficient; 2-factor authentication is a separate control

Common issues

## What's Next