Google Workspace integration with MaaS360

Information about integrating MaaS360 with Google Workspace. This integration provides visibility into devices that have Google Workspace accounts configured as an enterprise mail resource and grants the ability to implement access control rules.

Before you begin

Requires administrator access to both MaaS360 and Google Admin console to complete the steps.

Procedure

  1. Enable the Android Enterprise solution through Google Accounts (G-Suite for business) in the MaaS360 portal. For detailed instructions in enabling Android Enterprise, see Integrating with a Google Workspace account
  2. Enable API access:
    1. Open https://admin.google.com and log in to the G Suite Admin account.
      The G Suite Admin console dashboard is displayed.
    2. Click More Controls, and then click Security.
      The Security page is displayed.
    3. Click API reference, and then select the Enable API access checkbox.
  3. Connect to the Google directory to synchronize the users to the MaaS360 portal.
    1. Click Connect to Google Directory.
    2. Open https://console.developers.google.com and log in to the Google Cloud Platform by using your administrator account.
    3. From the Dashboard, click Enable APIS and Services> MaaS360 drop-down list. The Select a resource page is displayed.
    4. Click NEW PROJECT.
    5. Enter the project name. Use MaaS360 as the project name.
    6. Under the project name, click Edit, and then enter the Project ID. Use MaaS360-Corporate ID as the project ID. Click CREATE.
  4. Enable the Admin SDK:
    1. From the Dashboard, click Enable APIS and Services.
      The API Library page is displayed.
    2. Search for the Admin SDK, open it, and click Enable.
    3. Go to the Credentials section on the sidebar.
    4. Click Configure Consent Screen, select External, and click CREATE
    5. Enter an email address and a product name, and then click Save and Continue.
    6. Select Create Credentials > OAuth client ID.
      The Create client ID page is displayed.
    7. Select the Application Type > Web Application, and then enter the URL you use to access your instance of MaaS360. For example: https://portal.fiberlink.com.
      Note: To determine which URL to use for your instance of MaaS360, go to MaaS360 Portal Home page > Setup > Services > Enterprise Email Integration > Configure Google Credentials, and then click Next. The URLS are listed in Step 6.
      MaaS360 instance URLs for GSuite integration
      • For authorized JavaScript origins, enter the following address: https://URL for your MaaS360 instance

        For example: https://portal.fiberlink.com

      • For authorized redirect URIs, enter the following address: https://URL for your MaaS360 instance/cloud-integration-portal/googleAuthCallBack/response

        For example: https://portal.fiberlink.com/cloud-integration-portal/googleAuthCallBack/response

    8. Click Create.
      Note: Make sure that you write down the Client ID and the Client Secret for your records.
    9. From the Credentials page, download the JSON file from the MaaS360 client that you created.
  5. Configure Google credentials:
    1. Enter the administrative email address of the administrator who created the API.
    2. Upload the JSON file.
    3. Enter an email address for failure notifications.
    4. Select Upload.
    5. The credentials configured successful page is displayed.
  6. Click Authorize Now to authorize MaaS360 to access data from Google Directory.
  7. Select an email account to login to MaaS360. Click Allow.