In order to allow Staffbase to access your organization’s Google Workspace securely, you need to configure the Google Workspace connection with Google OAuth Client ID and Client Secret.

To obtain Google OAuth Client ID and Client Secret, you need to do the following:

1. Create a project.
2. Enable Google Drive API.
3. Create an OAuth Screen.
4. Create Client ID.

Prerequisites

• You have a Google Enterprise subscription.
• You have admin rights for the Google Workspace account you want to connect.

Creating a Project

1. Sign in to the Google Cloud Platform.
2. Navigate to Dashboard and click Create project.
   
   
   
   The page to create a new project opens.
   
   If you have already created at least one project, click the project dropdown in the header to open a dialog from which you can create a new project.
3. Provide a name for your project. For example, staffbase-connection
4. Click Create.

You have created a project.

Enabling Google Drive API and Google Calendar API

You enable each API separately. Go through these steps for each of the APIs:

• Google Drive API
• Google Calendar API

1. In the Google Cloud Platform, open the project you created.
   
   
2. From the left menu, navigate to APIs & Services > Enabled APIs & services.
   
   
3. Click Enable APIs and Services.
   
   
4. Search for Google Drive API or Google Calendar API and click it.
   
   
5. Click Enable.
   
   
6. If necessary, repeat these steps from the start to enable another Google API. 

You have enabled Google Drive API for the project you created.

Creating an OAuth Consent Screen

After enabling the Google Drive API, you need to configure the OAuth consent screen that allows users to sign in to their Google account from the Staffbase platform. Users will see this authentication screen when signing in to their Google account through the Staffbase employee app for the first time.

1. In the Google Cloud Platform, navigate to the project you created > OAuth consent screen.
2. Under User Type, select Internal.
   
   
3. Click Create.
4. Under App Information, provide:
   • App name
   • User support email
   • App logo
5. Under Authorized domains, provide your Staffbase platform domain.
6. Under Developer contact information, provide the email address of your IT department.
7. Click Save and continue.
8. Click Add or remove scopes.
9. Select the scope options: 
   • For Google Drive API: auth/drive.metadata.readonly
   • For Google Calendar API: auth/calendar.events.readonly
     
10. Click Update.
11. Click Save and continue.

You have configured the OAuth consent screen and can now see a summary of the configured settings.

Creating the Client ID

After configuring the scope of your project, you can set up the client ID. The client ID is needed to configure the Google Workspace connection in the Staffbase platform and connect your organization’s Google account to the Staffbase environment.

1. From the project you created, navigate to Credentials.
2. Click Create credentials and then select OAuth client ID from the dropdown menu.
   
   
3. Under Application type, select Web application from the dropdown menu.
4. Under Name, provide a name for your client. For example, staffbase-connection-client.
   
   
5. Under Authorized JavaScript origins, click Add URI.
6. Provide all possible URIs at which your employee app or intranet can be reached. For example, https://app.staffbase.com or https://staffbase.yourdomain.com.
7. Under Authorized redirect URIs, provide the redirect URI.
   To create the redirect URI, you need to suffix your domain URI with

   /api/integrations/auth/googleWorkspace/callback

   Example of a final redirect URL:
   

   https://staffbase.yourdomain.com/api/integrations/auth/googleWorkspace/callback

8. Click Create.

You’ve created your client ID. You can now copy this client ID and use it to configure the Google Workspace connection.

Additional Helpful Information

• Adding the Google Workspace Connection to Staffbase