Issuetrak is capable of utilizing Google's secure API to provide several features. This article will provide details regarding the following items:
- Incoming Email
- Outgoing Email
- Asset Auditing (Google-managed devices)
Google's secure API can also be used with Issuetrak's Identity Management module for user authentication, but that process is detailed in our About OAuth / OpenID Connect article.
It is necessary to perform several steps in your Google account to enable this functionality and gather the required information. This article will show you how to perform those steps for email and asset audits, as well as where to enter the resulting information in Issuetrak.
Google Cloud Platform Steps
- Sign into Google's Cloud Platform using the Google account that you want to associate Issuetrak with.
- Click the icon with three horizontal lines in the upper left corner, select IAM & Admin, then click Create a Project.
- If you have existing Projects, you will be taken to one of those projects by default and will not see the Create Project link. To create a new project you will need to click the button in the top bar with the existing Project Name and click New Project in the pop-up.
- You'll be prompted to set a Project Name. We would suggest naming this something distinctive and descriptive, such as "Issuetrak Auth".
- You can also set which organization you want this project to work with. Select the organization that you want to be able to authenticate with Issuetrak.
- Click Create.
- A Notifications popup will appear and once the project creation is complete, click on the Select Project option that is shown.
- Perform the following based on how you expect to use the Google API.
- If you wish to process email from a Google account: Search for, Select, and then enable the Gmail API.
- If you wish to perform audits on devices associated with your Google Workspace: Search for, select, and then enable the Admin SDK API.
- Click on the hamburger icon in the top left area, then navigate to APIs & Services > OAuth consent screen.
- Click Get started.
- Enter an App name and select a User support email.
- Click Next.
- Read the information provided onscreen and decide whether Internal or External is best for your organization. If you're unsure, we would suggest selecting Internal.
- Enter an email address in the Contact Information field and click Next.
- Check the box to agree to the Google API Services: User Data Policy and click Continue.
- Click Create.
- If you selected External in step 8, click Audience on the left > click Publish app > click Confirm.
- Click Clients in the left menu.
- Click + Create Client.
- Choose Web Application from the dropdown.
- Enter a name for the web application. In this example, we will call it "Issuetrak 001".
- Under "Authorized Redirect URIs", click Add URI and add the following URL (adjusted with your own site URL): https://your_site_url/core/OAuthProvider/RedirectUrl
- Click Create.
- You will be provided with your Client ID and Client Secret. You will need this information to configure Issuetrak in the next section. You can choose to copy/paste these values into your own credential management framework or download the JSON to a safe location for reference later.
Adding Google API Credentials to Issuetrak
We must now configure Issuetrak so that it knows how to communicate with your Gmail account. This section assumes that you have the information we obtained in the steps above.
- Sign into Issuetrak with a Sys Admin account.
- Navigate to the settings lightbox via the gear icon in the upper right, then click on Google Applications under "Integrations".
- Click on Add New, then enter a Name that you'd like to associate with the Gmail account, as well as the required Client ID and Client Secret gathered in the prevous section.
- Click Save.
- Click Verify Connection.
- You'll be prompted to sign into the Google account you're attempting to access the API with. Go ahead and do so.
- Accept the prompt allowing your Issuetrak site to access your Google account.
Once this is complete, you can move onto configuring IEM and/or Outgoing Email.
Configuring Incoming Email to Use Google OAuth
Please see our article on configuring IEM mailboxes for the relevant steps.
Configuring Outgoing Email to use Google OAuth
Please see our article on configuring outgoing email for the relevant steps.
Configuring Asset Management to Capture Audits from Google-Managed Devices
Please see our article about Asset Audits to learn how to configure Asset Management to capture audits from Google-managed devices.