Google Service Authentication

This document describes the allow Google APIs server to server access for emakin rest clients.

Creating a Service Account

Before allowing to access you need to register emakin as application. This step is already configured cloud configuration and required only for on-premises.

1. Login to https://console.cloud.google.com
2. Please select "Service Accounts" from "IAM & Admin" menu.
3. Click on "Create Service Account" button and specify the name of service account.  (Ex: emakin)
4. Check "Furnish a new private key" and "Enable G Suite Domain-Wide Delegation"
5. Please select "Key type" as P12
6. Please note the "Service Account Id" for later use.
7. Click on Create Account to download p12 file.

Configuring Emakin for Google Login Service

1. Open workflow.config to add google as login service

2. In loginServices add a new element as below

   <add clientType="Google" enabled="true" clientId="<googleClientId>" clientSecret="<googleClientSecret>" scope="https://www.googleapis.com/auth/userinfo.profile https://www.googleapis.com/auth/userinfo.email" serviceAccountId="<googleServiceAccountId>" serviceAccountKey="<pathToP12File>;<password>" />

Configuring Emakin for Google Drive Integration

1. If you want to enable Google Drive; in fileServices add new element as below;

   <fileServices>
     <add clientType="Desktop" />
     <add clientType="Webcam" />
     <add clientType="GoogleDrive" scope="https://www.googleapis.com/auth/drive"/>
   </fileServices> 

2. If you want to allow offline access to API from without user interaction please add "offline" scope with space separated.

Related articles