Creating an Email Service Connection (API) to Google
An email service connection the Match My Email app to connect to email accounts of activated Users and bring copies of messages into a cloud space and ultimately into Salesforce. Google Workspace customers are able to make a connection using a JSON key tied to Service Account in which scopes have been authorized and APIs enabled.
To create such an email service connection, a Google Super Admin can perform the steps needed on their own. Upon completion, they would send the JSON file and Admin email address to the Salesforce System Administrator that is managing the Match My Email account. These steps with more detailed instructions and screenshots are available upon request.
Google Super Admin Steps:
- In the Developer console, create a project and then a service account. We recommend using Match My Email in the name. No roles need to be specified.
- Click on the Service Account label. Copy the Unique ID for a later step.
- Click Keys > Add Key > Create New Key. Accept the default JSON key. This will download a json file onto the local computer of the Admin User.
- Sign in to the Admin Console and go to Security > API Controls > Manage Domain Wide Delegation (at bottom of screen).
- Click New and paste the Unique ID from above.
- For OAuth scopes, copy the following together comma delimited and paste. Click Authorize.
https://www.googleapis.com/auth/admin.directory.customer, https://www.googleapis.com/auth/admin.directory.user, https://www.googleapis.com/auth/admin.directory.group, https://mail.google.com/, https://www.googleapis.com/auth/calendar.readonly, https://www.googleapis.com/auth/calendar.events.readonly
- Return to the Developer’s Console. From the navigation menu, go to APIS and Services > Library.
- Search for the Gmail API and Enable. Once complete also search for and enable the Admin SDK and Google Calendar API.
- Provide the json key file to the Salesforce System Administrator with the Admin User’s email address.
Salesforce System Administrator Steps:
The steps below assume Match My Email has been installed into the Salesforce instance and that a Match My Email account has already been created.
- The Salesforce System Administrator should login to Salesforce.
- From the App Launcher, find and click on the Match My Email app. In the App Menu, click Match My Email to the right of Home. This will authenticate the Admin into the Match My Email account.
- To the right, click the middle gear button and choose Control Panel in the drop down menu. This will open the Control Panel in a new browser tab.
- On the left, click Email Services.
- At the top, click + to add a service.
- Click the option for Google Workspace.
- Choose the option for “Yes, I’m a Super Admin” and click Next.
- Enter the Admin User email address. This may be their personal email address or could be a special address they use for this type of access, ex. firstname.lastname@example.org.
- Click Browse and navigate to the json file on the local computer. It is often in the Downloads folder. Double click to select and fill in the file name.
- Click Finish. The Email Service will then be listed.
- Once the email service is listed, the Salesforce Admin can follow steps to activate Users in this document.
If you need assistance, please contact our support team.