Set up OAuth applications in Google Cloud

To authenticate through Google Workspace Scope with a Custom OAuth Client or to use the Bring your own OAuth 2.0 app authentication for Integration Service connectors, you must configure your applications using the Google Cloud Platform.

There are two configuration steps:

1. Enable APIs - This step enables automation by granting API access to your Google Workspace applications.
2. Create credentials - This specifies the authentication type used to interact with your enabled APIs.

Note: This procedure was documented in an older version of the Google Cloud Platform. The user interface may have suffered minor changes in the meantime.

Enable APIs

1. Sign in to the Google Cloud Platform using your personal, work, or school Google G Suite account.

2. In the top menu bar, after Google Cloud Platform, select the project you want to use for your automation project.

   • If you don't have a project, create one by following the Creating and Managing Projects instructions in the Google Cloud documentation.

     
     

     

     
     
3. Open the menu in the top navigation bar.

4. Hover over APIs & Services (showing a menu of options) and select Library (opening the API Library).

   
   

   

   
   
5. From the API Library, go to the G Suite section.

6. Click the application you want to enable APIs for (e.g., Google Drive API).

   • The APIs supported by the Google Workspace activity package are: Google Drive API, Google Calendar API, Gmail API, Google Sheets API, Google Docs API, Google Tasks API, Google Forms API.

     
     

     

     
     

7. From the selected application API page, click Enable.

   
   

   

   
   

8. Repeat steps 5-6 to enable APIs for the remaining applications.

   • If you want the ability to use all of the Google Workspace activities, enable APIs for Google Drive API, Google Calendar API, Gmail API, Google Sheets API, Google Docs API, Google Tasks API, Google Forms API.

You're done! Now, let's create your credentials to access the enabled APIs.

Create credentials

Note: You should consult your IT department to determine the type of credentials you should use for your project. For more information about the differences between the credential types, see Authentication Overview in the Google Cloud documentation.

Follow the steps listed below to create credentials for your project.

1. From your project APIs & Services page (Google Cloud Platform> Project > APIs & Services), select Credentials in the left-hand navigation panel.

   
   

   

   
   

2. After the Credentials page opens, click Create credentials and select the type of credentials used for your application. For information about each credential type, see the details below.

   • API key - An API key is the simplest authentication mechanism.
     • For more information about API Keys, see Using API Keys in the Google Cloud Documentation.
   • OAuth Client ID - When creating the Credential, its type should be "Desktop" (if you're using a private app in Google Workspace Scope) or "Web" (if you're using a private app in Integration Service).
     • The OAuth Client ID method works with all Google Workspace services. However, it's recommended for attended automation because user consent is required before the robot can access your Google account. For details, see User consent in the Google Help documentation.
     • For more information about OAuth client ID, see Using OAuth 2.0 to Access Google APIs in the Google Cloud Documentation. For step-by-step instructions, see Setting up OAuth 2.0 in the Google Help documentation.
   • Service account key - A service account key is a special type of Google account that belongs to your application instead of to an individual end-user. Your application calls Google APIs on behalf of the service account, so users aren't directly involved.
     • For more information about Service account keys, see Understanding service accounts in the Google Cloud Documentation.

3. Follow the applicable instructions to add your selected credentials:

   • API key
   • OAuth Client ID
   • Service account key

You're done!