An authenticated connection to Google is required in order to access emails, files from Google Drive, or calendars. This guide is a walk-through to establish an OAuth application connection, based up on Googles interface in the year 2022.

The following prerequisites must be fulfilled for a successful connection to the Google authentication service:

• The i-net HelpDesk server must be secured with HTTPS
• The i-net HelpDesk server and browser client must be able to reach https://accounts.google.com/ and https://oauth2.googleapis.com/
• You have to be authorized to create an API and Service Login at https://console.cloud.google.com/
• The OAuth approval screen must be set and published correctly.

If an e-mail retrieval or dispatch is initiated with this profile, the following requirements must be met:

• The server must be able to call the following domains: smtp.gmail.com, imap.gmail.com.

Access to Google calendars in the Calendar Settings requires the Google Calendar API in the same Google Cloud project that provides the OAuth client. Creating the OAuth client and completing the consent screen is not sufficient.

• Open the Google Calendar API in the API Library and select the project used for the OAuth client.
• Click Enable.
• You can also open APIs & Services → Library, search for Google Calendar API, and enable it there.

When a user connects a Google calendar, i-net HelpDesk requests the scope https://www.googleapis.com/auth/calendar. This access must be available on the OAuth consent screen or in Data Access.

After you enable the API, wait a short time and connect the calendar again in the Calendar application.

Note: The calendar scope is classified as sensitive. For an External user type, Google may require app verification.

You are about to create a GCP API and Service login now. This login will provide the authentication credentials for the OAuth connection we want to add to i-net HelpDesk.

• Go to https://console.cloud.google.com/apis/credentials and log in
• Make sure, you have selected the appropriate project in the title bar of the interface, or create a new project
• Click Create Login in the menu, then select Oauth Client ID
• Select Web Application as the Application Type
• Enter a Name describing the application
• Add an Authorized Redirection URL and enter the value displayed in the configuration dialog of the i-net HelpDesk server, where a new connection is created
• Click Create

You have now create the login application. A dialog with the required information is displayed and you can download it as JSON file.

• Copy & Paste the Your Client ID into the Client ID field of the OAuth Connection dialog in the i-net HelpDesk configuration
• Copy & Paste the Your Client Key into the Secret ID field of the OAuth Connection dialog in the i-net HelpDesk configuration

Note: The Secret ID is considered a password, so please keep it in a safe place.