Skip to main content

Google Workspace Integration

This document provides a step-by-step guide for integrating Google Workspace with TheStorage service. These steps are essential for the service to retrieve and synchronize "Domain" user data. The service exclusively fetches profile data. To streamline the user experience and reduce the necessity for individual user configuration and setup, you must create a Google Workspace Service Account. This account enables seamless background actions on behalf of your users.

Requirements​

Google Workspace Admin permissions are required to complete the following steps.

Steps​

  1. Navigate to console.cloud.google.com.

  2. Create a New Project.

    new project

  3. Name the project as TheStorage. If required by your organization, you can choose a specific location, although it's recommended to place it in the top-level location.

    name

  1. Click the Create button. It may take a few moments to create the new project.

  2. Within the APIs & Services menu, choose Credentials.

    credentials

  3. Click the Create Credentials button and choose the Service Account menu item.

    service account

  4. On the Create Service Account page, enter the following information:

  • Service Account Name: thestorage_svc

  • Service Account ID: thestorage_svc (automatically generated)

  • Service Account Description (optional): TheStorage Service Account

    create service account

  1. When you're ready, click the CREATE AND CONTINUE button.

  2. There's no need to grant access to the project. Click on the CONTINUE button.

  3. You don't have to provide user access to this service account. Click on the DONE button.

  4. Now, you have a service account. However, there are still some additional steps to complete.

  5. Click the edit (pencil) button for the service account.

    edit

  1. On this page, you'll find a unique ID. Please make sure to copy this number and store it somewhere. You'll need it shortly.

    uniq ID

  1. On this page, click on the KEYS tab.

    keys

  2. Click the ADD Key button, and choose the Create new key menu item.

    new key

  3. Under the Key Type, choose JSON (which is the default option), and then click on the CREATE button.

    key type

  4. You will download a JSON file that will be required later. Please ensure you keep this file in a secure location.

  5. Now that the Service Account is set up, let's proceed to grant it some permissions.

  6. Now that the service account is ready, the final step on the Google side is to grant permissions to this account.

  7. Navigate to the https://admin.google.com page and log in using the Administrator account.

  8. From the left sidebar menu, go to Security -> Access and Data Control -> API controls. If you don't see it, you can use the search bar to find it.

    API control

  9. Click on the MANAGE DOMAIN WIDE DELEGATION button.

    domain wide delegation

  10. On this page, click the Add new button.

    add new

  1. In the Add new client ID pop-up, configure the following values:

  1. Click the AUTHORIZE button.

  2. The administrative tasks are complete. The final step is to fill out the Google Workspace integration form on TheStorage site.

  1. You will need the following:
  • The JSON file that you downloaded during the key generation.
  • The domain name that the company uses (e.g., mycompanyname.com).
  • The email address of the administrator who is executing this task.