You are here: Enterprise > How to Configure Google Workspace?

How to add a Google Workspace source?

The steps below explain how to add a Google Workspace account to Syncgene. For more detailed explanation, check Perform Google Workspace Domain-Wide Delegation of Authority.

Complete these steps below:

  1. Go to Google API Console.
  2. Create a project that is only intended to be used for SyncGene synchronization.
  3. Go to Marketplace with the project created for SyncGene synchronization selected.
  4. Find “Google People API” and enable it
  5. Repeat steps 2,3 and enable all of these APIs:
    • Admin SDK API
    • Google Calendar API
    • Tasks API
    • Google Drive API
  6. Open the Service accounts page. If prompted, select a project.
  7. Press “Create a Service Account”, enter a name and description for the service account. You can use the default service account ID, or choose a different, unique one. When done click Create.
  8. The Service account permissions (optional) section that follows is not required. Click "Continue".
  9. "Grant users access to this service account(optional)" section that follows is not required. Click "Done".
  10. On Services accounts list, press "" next to service account (in "Actions" column) you created, and select "Manage keys".
  11. Click "Create key".
  12. In the side panel that appears, select the format for your key: JSON is required.
  13. Click Create. Your new private key pair is generated and downloaded to your machine; it serves as the only copy of this key. The downloaded JSON file will be required in future steps.
  14. Click Close on the Private key saved to your computer dialog, then click Done to return to the table of your service accounts.

You will also need to enable Google Workspace domain-wide delegation. Follow these steps:

  1. Open the Service accounts page. If prompted, select a project.
  2. On Services accounts list, press "" next to service account (in "Actions" column) you created, and select "Manage Details".
  3. In the service account details, click Show domain-wide delegation, then ensure the Enable Google Workspace Domain-wide Delegation checkbox is checked.
  4. If you haven't yet configured your app's OAuth consent screen, you must do so before you can enable domain-wide delegation. Follow the on-screen instructions to configure the OAuth consent screen, then repeat the above steps and re-check the checkbox.
  5. Click Save to update the service account. A new column, Domain-wide delegation, can be seen. Click View Client ID, to obtain and make a note of the client ID.

Delegate domain-wide authority to your service account.

The service account that you created needs to be granted access to the Google Workspace domain’s user data that you want to access. The following tasks have to be performed by an administrator of the Google Workspace domain:

  1. Go to your Google Workspace domain’s Admin console.
  2. Go to Main Menu>Security>API controls.
  3. In the Domain wide delegation pane, select Manage Domain Wide Delegation
  4. Click Add new.
  5. In the Client ID field, enter the client ID obtained from the service account creation steps above.
  6. In the OAuth Scopes field enter the following scopes required for SyncGene synchronization:
  7. https://www.googleapis.com/auth/drive.appdata, https://www.googleapis.com/auth/tasks, https://www.googleapis.com/auth/contacts, https://www.googleapis.com/auth/calendar.settings.readonly, https://www.googleapis.com/auth/calendar.events, https://www.googleapis.com/auth/calendar, https://www.googleapis.com/auth/admin.directory.orgunit.readonly, https://www.googleapis.com/auth/admin.directory.user.readonly

    Please note - every scope must be specified even if you do not need it for your use case.

  8. Click the Authorize button.

Once you completed the steps above, you need to configure Google Workspace account on SyncGene:

  1. Go to add Google Workspace source page.
  2. Upload JSON file you downloaded during Google Workspace configuration.
  3. Enter email address of one the admins responsible for managing your Google Workspace account
  4. Press "SUBMIT"

You are finished! You can now use the Google Workspace source to create SyncGene accounts and assign sources.

 

 

For latest instructions, check out Perform Google Workspace Domain-Wide Delegation of Authority

If you have any questions, you can write us an email, contact us via live chat, or call via phone: +1 (954) 796-8161.