Adding Google OAuth 2.0 credentials

Google mobile devices REST API uses OAuth2 based authentication.

To integrate Google with Oomnitza, you'll need the following information:

• Client ID
• Client Secret
• Scope

You can obtain your Client ID and Client Secret by completing the following steps in the Google API Console:

Create a new project

1. Open the Google API Console Dashboard.
2. In the sidebar, click Enabled APIs & services.
3. Select the dropdown arrow next to the project name and click New Project.
4. Enter a Project name and click Create.

Create an OAuth app

1. In the sidebar, click OAuth consent screen.
2. Select either Internal or External, depending on who you want to make your app available to.
3. Click Create.
4. Enter your App name and details. You do not need to specify an Authorized domain here, as it will be automatically populated when you add your redirect URL.
5. Add your scopes. You can enter multiple scopes separated by blank spaces. For a complete list of scopes, refer to Google documentation: OAuth 2.0 Scopes for Google.

Oomnitza integration	Required Scopes
Google Cloud instances	https://www.googleapis.com/auth/compute.readonly https://www.googleapis.com/auth/compute
Google Workspace Chrome OS devices	https://www.googleapis.com/auth/admin.directory.device.chromeos
Google Workspace Mobile devices	https://www.googleapis.com/auth/admin.directory.device.mobile
Google Workspace Users	https://www.googleapis.com/auth/admin.directory.user https://www.googleapis.com/auth/admin.directory.user.security https://www.googleapis.com/auth/admin.directory.group https://www.googleapis.com/auth/admin.directory.group.member https://www.googleapis.com/auth/admin.directory.user.readonly https://www.googleapis.com/auth/gmail.settings.basic https://www.googleapis.com/auth/gmail.settings.sharing https://www.googleapis.com/auth/calendar https://www.googleapis.com/auth/drive https://www.googleapis.com/auth/userinfo.email
Google Workspace User groups	https://www.googleapis.com/auth/admin.directory.group.readonly https://www.googleapis.com/auth/admin.directory.group https://www.googleapis.com/auth/admin.directory.group.member

Create your credentials (Client ID and Secret)

1. In the sidebar, click Credentials.
2. Click Create Credentials>OAuth Client ID.
3. From the Application type list, select Web application.
4. Provide the following redirect URL for Oomnitza: https://generic-oauth2-proxy.oomnitza.com/oauth2/redirect_url .
5. Click Create.
6. Copy or download your Client ID and Client Secret.

Tip
Don't forget to keep a copy of your client secret.

Enable Admin SDK API

1. In the sidebar, click Library.
2. Search for Admin SDK API.
3. Click the API tile.
4. Click Enable. 

Important
If you do not have Admin SDK enabled or the correct scopes defined, you may receive a 403 Forbidden insufficient permission response code when you run the integration in Oomnitza.

Adding the credentials

Important
Some APIs might be restricted to Administrators or users with specific roles. To check that your user account has the appropriate privileges, open this page https://admin.google.com/. If you can access this page, you should have no issues in adding your credentials. 

To stream Google data in Oomnitza, complete the following steps:

1. In Oomnitza, click Configuration > Security > Credentials.
2. Click Add new credential (+).
3. Search for the integration, and then click the forward button > to select the integration.
4. Enter your client credentials and any other additional information.
5. Click Authenticate. You are prompted to log in to authorize your request.
6. Click CREATE.

Information
If the integration is not listed, click Advanced Mode, and add your credentials.

1. Add the information details.
2. Click the AUTHORIZATION tab.
3. Ensure that OAuth 2.0 is selected as the Authorization type.
4. Ensure that Google is selected from the SaaS list.
5. Enter your Client ID, Client Secret, and Scope. 
6. Click Authenticate.
7. Click Create.  

Documentation Links

For further information please consult the links below:

• Google Identity Platform: Getting the Google API Client ID
• Google Identity Platform: Using OAuth 2.0 to access Google APIs 
• Google Identity Platform: Using OAuth 2.0 for Web Server Applications
• Google Identity Platform: OAuth 2.0 Scopes for APIs