Verify you meet the prerequisites listed before mapping SaaS application authorizations to the Active Directory groups:
Configure SaaS Connectors. For more information, see Section 3.6, Configuring the Connector for Google Apps for Business and Section 3.7, Configuring the Connector for Salesforce.
Ensure groups in Active Directory exist.
Populate the required attributes on the users in Active Directory. For more information, see Section 3.4, Verifying the Identity Source User Attributes.