Only show these results:

Create a Google Application

Before you create your application with Google there are a few things to keep in mind.

Hosted or Native Authentication

Decide which method of authentication works for you.

Hosted Authentication

The fastest way to get started. If you aren't interested in customizing your application, or just want to test with a few users, use Hosted Authentication.

Learn More

Native Authentication

Use this method to customize your application. This means your users will see your company name instead of Nylas on the OAuth screen. Native Authentication requires that you have an application built with a callback URL.

Learn More

Switching Authorization

Switching between Native and Hosted Auth will require a new application and for accounts to be reauthorized.

Internal or External Application

Decide if you want your application available to anyone or only users part of your organization.

Internal Application

Use internal users for Google account access for development or production applications that are internal only. Only users who have an account within your organization, @your-organization.com, can access the application.

When users from your organization authorize against your application they will not see the unverified application warning.

Use internal applications to skip the App Verification and Security Review process. If anyone outside your organization needs to verify against your application at any time, you will need to go through the Google security review.

Learn More

Learn more about Unverified apps at Google.

External Application

Use external users if you are creating a production app and will need to go through Google security verification. This option will allow users who are not in your organization to authenticate against your application.

When users from your organization authorize against your application they will see the unverified application warning.

External apps are limited to 100 accounts before verification.

Learn More

Learn more about Unverified apps at Google.

Create a Google App

  1. Go to https://console.cloud.google.com/projectcreate

    Google Create Project page

  2. Give your project a name.

  3. Select your project Organization and Location.

  4. It can take several minutes for the project to be created. Once complete, you'll return to the dashboard with Create Project notifications.

Google Cloud Platform Dashboard notification for Create Project

Enable Your APIs

  1. Click Enable APIs and Services or Library.

    Google Console Enable APIs

  2. Enable the following APIs. You can find the APIs using the search.

  • Gmail API - Required to read and send messages including drafts and attachments. Needed for threads, labels, drafts, outbox, send, files, and neural.
  • Google Calendar API - Required to use the calendar and events endpoints. Required for Scheduler and Agenda Components.
  • People API - Required for contacts and Contact List Component.
  • Admin SDK API - Enable this if you need access to room information for calendar events.
  • Contacts API - Required for contacts and Contact List Component. The Contacts API has been deprecated. New accounts should use the People API.
Google API Library

Configure Your OAuth Screen

You can configure your application's OAuth screen. This is the page users will see when they authenticate your application.

Google OAuth Screen
  1. From the Google APIs dashboard, click OAuth consent screen.

Choose your user type, either Internal or External.

Internal OAuth Screen

  1. Next, fill out the required OAuth consent information. For the Authorized domains use nylas.com.
  2. Save and Continue.
  3. Click Add or Remove Scopes. Select .../auth/userinfo.email, .../auth/userinfo.profile, and openid.
  4. Then review the Google Scopes and how they map Nylas. Then select the scopes needed for your application.
  5. Review the Summary and make sure the information is correct for your application.

External OAuth Screen

  1. Next, fill out the required OAuth consent information. For the Authorized domains use nylas.com.
  2. Save and Continue.
  3. Click Add or Remove Scopes. Select .../auth/userinfo.email, .../auth/userinfo.profile, and openid.
  4. Then review the Google Scopesand how they map Nylas. Then select the scopes needed for your application.
  5. At step 3, Test Users, you can skip this for now. We’ll go back and change the app to Production.
  6. Review the Summary and make sure the information is correct for your application.
  7. Click Back to Dashboard.
  8. Under the heading Publishing status, click Publish App. Publishing your app makes it so that you authorize users using the Nylas API instead of needing to add them one at a time to the Google test users. The app will show as unverified until you go through the Google Security Review.
Google Console App Dashboard

Google Authentication Scopes

Review the scopes and choose the ones for your application.

Known Bug in Google Scopes

Due to a known bug with the Google API you shouldn't authenticate Google accounts with both email.read_only and email.metadata scopes. Doing so will cause Google to return 403 errors.

Google Scope Nylas Scopes
userinfo.email Required Google scopes
userinfo.profile Required Google scopes
openid Required Google scopes
gmail.compose email.drafts, email.send
gmail.modify email.modify, email.send
gmail.labels email.folders_and_labels
gmail.metadata email.metadata
gmail.send email.send
gmail.readonly email.read_only
calendar calendar
calendar.readonly calendar.read_only
contacts contacts
admin.directory.resource.calendar.readonly room_resources.read_only

Create Credentials

  1. Click Create Credentials or Credentials.
  2. Select OAuth client ID.
  3. Select Web Application as the Application Type.
  4. Give the application a name.
  5. Update Authorized redirect URIs:
  6. Click Create.
  7. You’ll see your Client ID and Secret displayed in OAuth client created. Save this someplace safe. You’ll need these for your Nylas application.
Google Console Create Credentials

Add Nylas to Your Application

Adding Nylas as an application owner helps our support team diagnose any issues that may arise.

  1. Click the menu, and select IAM & Admin > IAM.
  2. Click Add.
  3. Add [email protected] as an owner.
  4. Save.
Google Console IAM

Push Notification Requirements

For push notifications from Google to Nylas, Nylas must be added as an application owner. This allows you to verify api.nylas.com as a domain. For EU customers, verify the domain ireland.api.nylas.com as well.

Navigate to API & Services, then Domain Verification to verify domains. These domains are only verifiable through [email protected].

Add Your Client ID and Secret to Nylas

  1. Log in to your Nylas Dashboard.
    1. If you don’t have an application, select Create New App.
  2. Select the App you want to update.
  3. Click App Settings.
  4. Select Google OAuth.
  5. Fill out your Google OAuth Client ID and Google OAuth Client Secret.
Nylas Dashboard Google Auth

Congratulations!

You’ve created a Google App and added it to your Nylas application!