Provisioning Asset Mgmt in Google G-Suite

This guide explains how to configure Asset Management integration with Google Workspace (G Suite) using OAuth 2.0 authentication. This integration enables Asset Management to securely access and manage device and user data from your Google environment.

Step 1: Create a New Google Cloud Project

Log in to the Google API Console using an administrator account and create a new project.

Select New Project and provide a descriptive name (for example, “AM Integration”).

The organization and location fields will be prefilled based on your domain.

Step 2: Enable Required APIs

Enable the necessary APIs for your project.

1. Select Enable APIs and Services.
   
2. Search for Admin SDK API.
   
3. Click Enable.
   

After enabling the API, navigate to the “OAuth consent screen” from the menu.

Step 3: Configure OAuth Consent Screen

Set up the OAuth consent screen for your application:

• Select Internal or External based on your organization’s needs.
  
• Complete the setup steps:
  
  • App Information
  • Scopes
  • Test Users
  • Summary

Step 4: Create OAuth 2.0 Client Credentials

Generate OAuth credentials to connect Asset Management to Google:

1. Go to Credentials and click Create Credentials.
   
2. Select OAuth client ID.
   
3. Choose Web application as the application type.
   
4. Enter a descriptive name.
   

Add the following to “Authorized Redirect URIs”:

• Your district TIPWeb-IT URL with: 
  /AuthCallback/IndexAsync
• https://oauth.pstmn.io/v1/browser-callback
• https://oauth.pstmn.io/v1/callback

After creation, copy the Client ID and Client Secret for use in Asset Management.

Step 5: Assign Google Admin Privileges

Assign appropriate permissions to the Google account used for integration:

1. Log in to the Google Admin Console.
   
2. Go to Users and select the integration account.
   
3. Open Admin roles and privileges.
   

Required privileges include:

• Chrome Management
• Mobile Device Management

Assign permissions as follows:

• Read access (required for data retrieval)
  
• Manage access (optional, required only if enabling/disabling devices via Asset Management)
  

After assigning the role, log in to Asset Management and navigate to Integration Settings, then select Authorize G Suite using the configured account.