Email settings: Gmail Configuration for Google Workspace Service Connection

Service Connection 

Log in to the Administration area of the Digital Workspace Platform, proceed to Integration navigation Item → Service Connections → choose Connections.

1. To start configuration, click Add Service Connection action:
   
2. Fill out the required fields:
   
3. In the Service field, select Google Workspace object, which is available by default in the system:
   
4. The name for your Service Connection is auto-generated, but you can modify it if necessary:
   
5. In the Tenant field, proceed with creating a new tenant. Fill out the name:
   
6. In the Service field choose Google Workspace with OAuth Authentication Type:
7. For Client ID and Client Secret, login to Microsoft Azure porta go to Google Cloud Platform:
   
8. On the home page of the  Google Cloud Platform,  create a New Project:
   
9. Provide a project name. Leave the default configuration in the Location settings:
   
10. In the Notifications area, click Select Project:
    
11. In the search bar, find and enable Gmail API:
    
    Enabled Gmail API is shown in the APIs & Services Dashboard as follows:
    
12. In the OAuth consent screen, choose External User Type and click Create:
    
13. Follow the suggested steps and fill out the necessary information:
    • OAuth consent screen: enter the App name and User support mail:
    • Scroll down to Authorized domains section and add the necessary domains:
      
      Add Developer contact information and click Save and continue.
14. Scopes: define the permissions you request users to authorize for your app and allow your project to access specific types of private user data from their Google Account. Choose necessary options from the suggested list or add the scopes manually, for instance:
    • https://www.googleapis.com/auth/gmail.send
      
15. Scroll down and click Save and continue. Proceed without changes to the Summary page to save your configuration. 
16. Go Back to Dashboard → OAuth consent screen → Publishing status → click Publish App → Confirm:
    
17. Go to Credentials → click + Create Credentials → choose OAuth client ID:
    
18. In Application type, choose Web application:
    
19. Enter the name and add Authorized redirect URIs. Modify the Authorized redirect URIs according to the example:
    https://{hostname}/wm/externalAuth/redirect.html
    
    
    Click Create to save the configuration.
20. Use the generated credentials for the Google Workspace Tenant configuration in Service Connections:
    
    Google Cloud Platform: Client ID and Client Secret values for Service Connections Tenant configuration
    
    Digital Workspace Platform: Client ID and Client Secret values for Service Connections Tenant configuration
21. To finalize the Service Connection configuration, in the Administration area click Setup Authentication:
    
22. Sign in with your Google account.
23. Accept the requested permissions:
    
24. When Service Connection Authentication has been successfully fulfilled, click Done:
    

Emails settings 

To finalize the emailing configuration, in the Administration area, open Settings → Edit Global System Settings. 

In the Emails view:

• Enabled: select the checkbox to enable emailing
• Specify SMPT server according to the email server configuration
• Verify the Default Sender
• Enable SMTP Authentication
• Enable Use SSL option
• Select Modern Authentication (OAuth 2.0) property
  • Mailbox Email Address: enter an address of an active and available mailbox that is the same as the one registered for your Gmail Workspace Account
  • Service Connection: choose a previously created Service Connection

Click Done to finalize the configuration and save changes.

Now your Digital Workspace Platform emailing is working.