Adding service account credentials to the Google Admin console
This section describes how to add the client ID from the service account credentials to the Google Admin console. These settings allow Google to trust FortiClient EMS, which enables FortiClient EMS to retrieve information from the Google domain.
To add the client ID:
- In the Google Admin console, go to Security > Advanced settings > (you may need to click "show more" to see this) > Manage API client access.
- Set the following options:
- For the Client Name option, add the client ID from the service account credentials.
- For the API Scopes option, add the following string: https://www.googleapis.com/auth/admin.directory.orgunit.readonly,https://www.googleapis.com/auth/admin.directory.user.readonly
The API scopes are case-sensitive and must be lowercase. You may need to copy the string into a text editor and remove spaces created by words wrapping to the second line in the PDF.
- Click Authorize.