Mass Provisioning of SCC Chrome Extension for Gmail end users

Google

Enterprise customers of SmartCloud Connect for Salesforce and Gmail can make use of this mass provisioning scenario and the mass deployment scenario for Windows systems (via Active directory) to set up the product for all end users in an Org.

These scenarios are typically performed by the local email/system Administrator. If the company prefers not to grant Gmail/GSuite data access to SmartCloud Connect for each individual end user’s mailbox due to security policies or the end users being too many.

Note

Handling of your email/calendar and CRM data by SmartCloud Connect Chrome Extension for Gmail is based on the same set of Privacy and Security principles as SmartCloud Connect Add-In for MS Outlook/Office 365.

After the SmartCloud Connect Chrome Extension has been installed in the end users’ Chrome browsers either individually or in bulk by the Admin, follow the below steps to configure and use a Gmail/GSuite Service account to mass-configure SCC for the end users.

1. You should prepare an in-org Gmail/GSuite account which will be used only for providing Gmail data access for SCC end users

2. Configure this account as a Service account. Follow guide 1 to create a Gmail service account or guide 2 to create a GSuite service account via Google console

3. Follow this Google guide to authorize the service account to access other accounts’ data

The scopes required for the service account on Step 4 for the above Google guide:

https://www.google.com/m8/feeds/
https://www.googleapis.com/auth/calendar
https://www.googleapis.com/auth/drive [optional, if DisableDriveAttachments is enabled]
https://www.googleapis.com/auth/drive.appdata
https://www.googleapis.com/auth/gmail.labels
https://www.googleapis.com/auth/gmail.modify
https://www.googleapis.com/auth/tasks
https://www.googleapis.com/auth/userinfo.email

 

4. Next Log in to SmartCloud Connect Admin panel with Admin credentials provided by Invisible.io

5. On the Organizations tab, select the Organization which the end users belong to; see the articles on managing organizations and managing users in SCC Admin panel

6. Select the E-mail configuration subtab for this organization and pick Google Service Account in the Mailbox Access Type box

7. An Upload JSON file line will appear; click the button Upload file next to it, browse your hard drive and select the JSON Web Token file which was generated on Step 2 of this guide

8. Now, if everything was configured correctly, you will see the Project ID and Client ID of your service account and its Connection status