FAQ for GCPW

No. Google Credential Provider for Windows supports only Google as the identity provider.

Yes. You can control how long users are allowed to sign in offline after their last online sign-in:

• If you manage GCPW in the Admin console, go to the Offline access setting, select Enabled, and enter the number of days. Learn how
• If you manage GCPW with registry keys, set the validity_period_in_days registry key with the number of days. Learn how

Yes, if your Google Workspace supports it. You can set the GCPW session length in your Admin console with Google session control. Learn how

Note: The Google session control setting applies to GCPW as well as Google Workspace core services, such as Gmail on the web. You can't set different session lengths for different services. 

Yes, but GCPW does not support USB security keys. GCPW supports other 2-Step Verification methods, such as Google prompt, Google Authenticator, and backup codes.

Yes, you can turn off or delay automatic updates.

In the Admin console (recommended)

In your Admin console, you can turn off updates, but we recommend that you prevent updates after a specific version instead. This setup lets you test new releases in a test environment before your users get them, but keeps the ease of automatic updates. Learn how

With Google Update and Group Policy

If you don’t manage GCPW settings in your Admin console and the devices are AD-domain joined, you can use the Group Policy Management Editor to enforce GCPW settings in Google Update. With this method, you can only allow or block updates. You can’t set an allowed latest version.

First, set up an administrative template to install and define policies for Google Update:

1. Download and extract the administrative template XML-based (ADMX).
2. Open the GoogleUpdateAdmx folder.
3. Copy google.admx and GoogleUpdate.admx to your Policy Definitions folder, such as C:\Windows\PolicyDefinitions.
4. In GoogleUpdateAdmx, open the locale-specific folder, such as en-US or es-ES, and copy the google.adml and GoogleUpdate.adml files to the corresponding locale folder in your Policy Definitions folder, such as C:\Windows\PolicyDefinitions\en-US.
5. Open the Group Policy app.
6. Go to Computer ConfigurationPoliciesAdministrative TemplateGoogleGoogle Update and verify that the template loaded correctly.

Then, set the policy:

1. In Group Policy, go to Computer ConfigurationGoogleGoogle UpdateApplicationsGoogle Credential Provider for Windows (GCPW).
2. Open Update policy override and enable it.
3. Click Options and select Updates disabled.

   Or, to enable updates, select Always Allow Updates (recommended).

_{Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.}