Important: This is for admins with a Gusto Plus or Premium plan. If you're on another Gusto plan, you can upgrade at any time. Google Workspace and Microsoft 365 work email provisioning are available on all Gusto plans.
Provisioning apps let you connect your team’s tools to Gusto, so you can quickly give or remove team member access to apps like Slack or Zoom from one place.
Provisioning integrations currently support employees and contractors. International empoyees, international contractors, and and non-employee admins are currently not supported by provisioning integrations.
App
Overview
Notes
15Five
Create and remove accounts.
Connection type: API Key
Asana
Create and remove accounts (delete users).
Connection type: OAuth
Box
Create and remove accounts (delete and suspend users).
Connection type: OAuth
ClickUp
Create and remove accounts.
Connection type: API Key
DocuSign
Create and remove accounts.
Connection type: OAuth
Dropbox
Create and remove accounts (delete and suspend users).
Connection type: OAuth
Dynatrace
Create and remove accounts.
Connection type: API key Requires a Digital Experience Monitoring plan or higher.
GitHub
Create and remove accounts.
Connection type: OAuth Deleting a user will remove them from the organization.
Google Workspace
Create and remove accounts (delete and suspend users). Assign users to Groups.
You can create an email through Gusto for new employees. Otherwise, the email may not show during onboarding. You can match existing emails to existing employees in the App Directory.
HubSpot
Create and remove accounts.
Connection type: OAuth
LastPass
Create and remove accounts.
Connection type: OAuth
Microsoft 365
Create and remove accounts (delete and suspend users).
Connection type: OAuth You can create an email through Gusto for new employees. Otherwise, the email may not show during onboarding. You can match existing emails to existing employees in the App Directory.
Okta
Create and remove accounts (delete users).
Connection type: API Key Requires a paid plan.
Planview LeanKit
Create and remove accounts.
Connection type: API Key Requires a paid plan.
Salesforce
Create and remove accounts (delete users).
Connection type: OAuth
Sauce Labs
Create and remove accounts (delete users).
Connection type: API Key Requires a Live Testing plan or higher.
Slack
Create and remove accounts (delete users).
Connection type: OAuth Requires a paid Slack subscription.
Trello
Create and remove accounts (delete users).
Zoho
Create and remove accounts.
Connection Type: API Key Supports Zoho Desk, Zoho Books, and Zoho CRM. Zoho Desk users need a Standard or Professional plan to connect.
To connect a provisioning app:
Go to App directory.
Click Provisioning apps.
Find the app you’d like to connect and click Learn More. If you don’t see the app you need, look for it using the search bar.
If your company already has an account with the app, click Connect.
If your company does not have an account yet, click Get [App Name].
Enter your admin credentials for the app.
Depending on the app, you may be automatically redirected to the app’s website to sign in and confirm your account.
You may also be asked to sign in to the app’s website and locate an API key, which is a special code that allows you to connect your company's accounts. Follow any on-screen instructions to finish connecting your accounts.
When to create vs. match accounts:
Match an account:
For team members who already have an account with Gusto and the third-party app.
Matching accounts lets you remove the employee's app access directly from Gusto if they leave the company.
Create an account:
For employees who do not yet have an account with the third-party app.
Creating an account from Gusto makes employee onboarding easier and lets you remove their app access directly from Gusto if they leave the company.
You can find matched accounts in the employee’s Gusto profile under Apps. You can also see them by going to App directory, clicking on the app, and going to Accounts.
If your employee or contractor already has a Gusto profile and an app account, you can match them in Gusto. This lets you easily remove their access to these apps right from Gusto if they leave your company. If your team member does not have an app account, you need to create one for them.
Note: Some accounts will be automatically matched if the employee’s name and email are the same in Gusto and the app.
To match an employee’s Gusto and app accounts:
Go to App directory.
Click Provisioning apps.
Find the app.
Click Accounts.
Click Match accounts.
The left side of the page lists all current app accounts associated with your company account. Find the employee you want to match and click Select an option.
Choose the Gusto profile associated with the account.
Repeat for any other accounts you want to match.
Scroll to the bottom of the page and click Match accounts.
To create an app account for a current employee:
Go to App directory.
Click Provisioning apps.
Find the app.
Click Accounts.
Find the employee and click the three-dot actions menu.
If you do not see the three-dot menu, this means they do not have an email listed in their Gusto account. You'll need to add an email address to their profile before completing these steps.
Click Create account.
The app will automatically email the employee an invitation to sign in to their new account.
Note: Wait to complete these steps until you’re ready for the new hire to have access to your apps.
Before you start, make sure you’ve connected your app and added the new hire to Gusto. If you sent them an offer letter through Gusto, you have to wait until they accept their offer before you can start the onboarding checklist.
To set up a new app account from a new hire's onboarding checklist:
Go to People.
Click Onboarding.
Click the new hire’s name.
Click Manage any outstanding tasks.
Next to Create app accounts, click Start.
On the Create app accounts with Gusto page, click Start setup.
Here you can see all of your company's connected and available apps. Click Save & continue.
Check the box for each app that you want the new hire to have an account for.
Click Save & continue.
Click Create accounts.
The app will automatically email the employee an invitation to sign in to their new account.
To create an app account for a US contractor:
Go to App directory.
Click Provisioning apps.
Choose your app.
Go to Accounts.
Find the contractor you want to create an account for and click the three-dot actions menu.
Click Create account.
The app will automatically email the contractor an invitation to sign in to their new account.
Status is "Invite Sent" instead of "Connected"
For some apps, the team member needs to accept the account invitation before the status in Gusto updates to "Connected." The invitation to the app is sent to the team member’s email.
There's an extra account on the "Match accounts page"
Some apps may automatically include a bot email with your account. You can simply choose “Do not match in Gusto” or leave it alone. This will not affect the cost of your app subscription—it's not considered a "seat" for billing.
When to delete, suspend, or unmatch accounts
When removing an employee’s app access, some apps let you choose between suspending or deleting the account.
Suspending the account removes the employee’s access to the app, but keeps the account and all their data live.
Check with the app directly to understand billing and seat management for suspended accounts.
Deleting the account removes the employee’s access to the app and deletes all their data. This means even admins will not be able to see their data later.
If you made a mistake when matching accounts or no longer want to manage the account in Gusto, you can unmatch them. Unmatching keeps the account active and the team member can still access the app. The app will also still charge your company for the account and any other active users. To manage the app, you need to sign in to the app’s website. If you want to rematch their account in Gusto, follow the match accounts steps.
There are two ways to delete, suspend, or unmatch accounts in Gusto: from the team member’s profile or from the App directory.
Delete, suspend, or unmatch a team member’s account from their profile
To delete, suspend, or unmatch an account from a team member’s profile:
Go to People.
Click the team member’s name.
Go to Apps.
To remove access for just one account, find the app and click the three-dot actions menu.
Choose between: suspend access, delete the account, or unmatch the account.
Remove all accounts: Clicking this will delete all of an employee's apps at once. This also deletes all data related to all their accounts.
Delete, suspend, or unmatch a team member's account from the App directory
To delete, suspend, or unmatch an account from the App directory:
Go to App directory.
Click the app.
Under Accounts, click the three-dot actions menu.
Choose to suspend, delete, or unmatch the account.
You may also see an option to Remove all accounts. This deletes all of an employee's apps and account data.
Remove a team member's accounts at dismissal
When someone leaves the company, you can securely remove their access to apps when you dismiss them.
If you set their dismissal date in the future, the employee will have access until 12:00am PT the day after their last day. For example, if their last day is January 1, their access is removed between 12:00am and 1:00am PT on January 2.
To remove a team member’s access at dismissal:
Dismiss the team member.
Once dismissed, go to People.
Go to Offboarding.
Next to the employee's name, click View checklist. For more about checklists, visit view and complete offboarding checklists.
Go to the Remove app access task.
To give someone, like an IT manager, permission to manage apps, go to manage roles and permissions in Gusto. Once you’ve updated their permissions, they’ll get an email letting them know.
If you no longer want to manage your team's app accounts from Gusto, you can disconnect the app. This does not delete any of your team members’ accounts.
Go to App directory.
Click Connected apps
Choose the app you want to disconnect.
Click About.
Click Disconnect.
The next time you need to give or remove someone's access to this app, you need to do so in the app instead of Gusto.