Cloud Access Manager 8.1.4 - How To Configure Google Apps

Introduction

This guide describes how to configure Google Apps for use with Cloud Access Manager provisioning.

Topics:

Prerequisites

Ensure that the following prerequisites are met before configuring Google Apps provisioning in Cloud Access Manager.

You will need:

1. Access to the Google Developer Console, this is available to anyone with a Google account.
2. A Google Apps domain.

Create a Google service account

To create a Google service account

1. Go to the Google Developers Console (https://console.developers.google.com) and log in if required.
2. Create a new project named CAM Prov.
3. Select Google APIs, and then under Google Apps APIs, click Admin SDK and then Enable.
4. Select Go to Credentials, then click service account.
5. Click Create Credentials, select Service account key and save your downloaded JSON file. You will need this when you configure Cloud Access Manager.
6. In Service accounts, click Edit on your Service account name.

7. In Edit service account, select Enable Google Apps Domain-Wide Delegation and then Save.

   NOTE: Domain-wide delegation needs to be enabled for the Service Account before the Client Id is accepted in the Authorized API Clients list within the Google Apps Business site.

8. Select your Service Account and then click View Client ID, copy the Client ID, you will need this to grant access to your Google Apps domain.

Configuring access to the domain

To configure access to the domain

1. Go to the Admin console for your Google Apps domain.
2. Select Security.
3. If Advanced settings is not displayed, click Show more and then click Advanced Settings.
4. Under Authentication click Manage API client access.
5. Paste the Client ID from the Service Account into the Client Name textbox.
6. In the One or More API Scopes textbox enter https://www.googleapis.com/auth/admin.directory.user and then click Authorize.