Skip to main content
Matrix42 Self-Service Help Center

Email settings: Gmail Configuration for Google Workspace Service Connection

Overview

This page provides a step-by-step guide on how to configure email sending in  Administration application via Google Workspace, involving modern authentication (OAuth 2.0) and Service Connections

This configuration is available starting from ESMP v.11.0.1 or higher. 

Email configuration belongs to the basic settings of the ESMP, therefore no extra subscriptions (ESMP Subscription) or licenses are required.

Perequisites 

  • Enterprise Service Management Platform v.11.0.1 or higher
  • An active and available mailbox that is the same as the one registered for your Google Workspace

Configuration

Configuration steps:

  1. New Service Connection using Google Workspace Service with Google Gmail capabilities;
  2. Emails settings in ESMP Administration area.

Service Connection 

Log in to the Administration area of the Enterprise Service Management Platform, proceed to Integration navigation Item → Service Connections → choose Connections.

  1. To start configuration, click Add Service Connection action:
    01_1.png
  2. Fill out the required fields:
    02.png
  3. In the Service field, select Google Workspace object, which is available by default in the system:
    04_gmail1.png
  4. The name for your Service Connection is auto-generated, but you can modify it if necessary:
    05_gmail1.png
  5. In the Tenant field, proceed with creating a new tenant. Fill out the name:
    06_gmail.png
  6. In the Service field choose Google Workspace with OAuth Authentication Type:07_gmail1.png
  7. For Client ID and Client Secret, sign in to Google Cloud Platform with your Google account:
    08_gmail1.png
    The Google Cloud Platform interface may differ from the one provided in the example. For up-to-date configuration, refer to the official Google Auth Platform - Google Cloud Platform Console Help documentation.
  8. On the home page of the  Google Cloud Platform,  in the top bar, next to the Google Cloud logo, click Select a project and create a New Project:
    01_Google new project1.png
  9. Provide a project name. Leave the default configuration in the Location settings and click Create:
    02_New Project.png
  10. In the Notifications area, click Select Project:
    03_select project1.png
  11. In the search bar, find and enable Gmail API:
    04_enable gmail api1.png
    Enabled Gmail API is shown in the Enabled APIs & services dashboard as follows:
    05_enabled gmail api.png
  12. In the OAuth consent screen, click Get started:
    06_get started with configuration1.png
  13. Follow the suggested steps and fill out the necessary information:
    • In the App Information, enter the App name, select the Gmail User support mail from the suggested list, and click Next:
      07_app information.png
    • In the Audience, choose External user type, so that users outside your organization will be able to use it, and click Next:
      08_app information1.png
    • In the Contact Information, enter the developer contact e-mail address(es) and click Next:
      09_contact information.png
    • Go through the finish step and click Create:
      10_agree and finish.png
  14. In the Branding configuration, scroll down to Authorized domains section and add the necessary domains:
    11_authorized domain.pngClick Save and continue.
  15. In the Data Access, add Scopes: define the permissions you request users to authorize for your app and allow your project to access specific types of private user data from their Google Account. Choose necessary options from the suggested list or add the scopes manually, for instance:
  16. Scroll down and click Save and continue. Proceed without changes to the Summary page to save your configuration. 
  17. Go Back to Dashboard → Audience → Publishing status → click Publish App → Confirm:
    13_publish app1.png

    After publishing, the app will require verification. When you have finished configuring your information, please submit your app for review. Go to verification center as suggested by the app and follow the instructions there (fill out the form, upload a YouTube demo video, etc.)

  18. Go to Clients → click + Create Client → created OAuth client ID:
    14_create client copy.png
  19. In Application type, choose Web application:
    15_web application.png
  20. Scroll down to the  Authorized redirect URIs and enter the name and add Authorized redirect URIsModify the Authorized redirect URIs according to the example:
    https://{hostname}/wm/externalAuth/redirect.html

    16_redirect URI.png
    Click Create to save the configuration.
  21. Use the generated credentials for the Google Workspace Tenant configuration in Service Connections:
    17_client_id_client_secret2.png
    Google Cloud Platform: Client ID and Client Secret values for Service Connections Tenant configuration
    24_gmail1.png
    Enterprise Service Management PlatformClient ID and Client Secret values for Service Connections Tenant configuration
  22. To finalize the Service Connection configuration, in the Administration area click Setup Authentication:
    25_gmail1.png
  23. Sign in with your Google account.
  24. Accept the requested permissions:
    27_gmail1.png
  25. When Service Connection Authentication has been successfully fulfilled, click Done:
    26_gmail_2.png

Emails settings 

To finalize the emailing configuration, in the Administration area, open Settings → Edit Global System Settings

28_gmail.png

In the Emails view:

  • Enabled: select the checkbox to enable emailing
  • Specify SMPT server according to the email server configuration
  • Verify the Default Sender
  • Enable SMTP Authentication
  • Enable Use SSL option
  • Select Modern Authentication (OAuth 2.0) property
    • Mailbox Email Address: enter an address of an active and available mailbox that is the same as the one registered for your Gmail Workspace Account
    • Service Connection: choose a previously created Service Connection

29_gmail.png

Click Done to finalize the configuration and save changes.

Now your Enterprise Service Management Platform emailing is working.  

 

You can also use this video tutorial as a reference:

The Google Cloud Platform interface may differ from the one provided in the example. For up-to-date configuration, refer to the official Google Auth Platform - Google Cloud Platform Console Help documentation.