Authorizing Google Drive as a Corporate Cloud Provider

Authoring Google Drive as a corporate cloud provider in eShare is a two-step process. Step one is performed in Google Admin Console, which is to add the eShare service Client ID in OAuth Scopes and, Step two is for the eShare administrator to complete the authorization process in eShare Management Dashboard.

In Google Admin Console

The organization's Google admin needs to enable access to admin API for the organization and delegate domain-wide access for eShare application (For more information on this, please see Delegating domain-wide authority to the service account). 

1. Login to Google Admin Console at https://admin.google.com/AdminHome

2. Navigate to Security > Overview page and select API Controls (at bottom of the page)

3. In API Controls, click on Manage Domain Wide Delegation (or navigate there directly using this link: https://admin.google.com/ac/owl).

4. In API Clients page, click on “Add new’

5. In the “Add a new client ID” modal window:

   • For Client ID: Input 110386037120635949713

   • For OAuth Scopes: Input https://www.googleapis.com/auth/admin.directory.customer.readonly
     https://www.googleapis.com/auth/admin.directory.domain.readonly
     https://www.googleapis.com/auth/admin.directory.user.readonly
     https://www.googleapis.com/auth/drive

6. Click on “Authorize” to save the settings. Sample representation of the API Clients page is shown below

In eShare Admin Console

After the API scope has been authorized by Google Admin, sign into your organization’s e-Share portal as administrator and follow the steps described below.

1. Login to your organization’s eShare portal (or the service URL at https://login.ncryptedcloud.com)

2. Click on Admin Console menu in left navigation pane

1. Proceed by selecting "Corporate cloud providers". Click on "Add..", followed by "Add cloud provider" to expose cloud provider icons. Select "Google Drive"

1. Complete authentication to Google Drive as Google Administrator (based on your security configuration, you may be prompted for MFA). After authenticating to Google, click on "Allow"

1. Click the checkbox to enable ‘Use for Secure email’ option

2. Google Drive for the organization is linked to eShare. Click on “ Auto-link eShare user to storage“ to authorize eShare for Team member access (section highlighted in image below)

1. When prompted, complete authentication to Google and click on "Allow". Linking e-Share to the organization's Google Drive is now complete. Your organization’s end users will automatically see their Google Drive linked in their eShare profile after next login to the portal.

1. Note: This is step is recommended only if you require each user in your organization to explicitly authorize eShare application access to Google Drive. If desired, you may choose to click on ‘Enable’ for “Require user consent”. If this option is enabled, each user logging into your eShare portal for the first time will have to click on “Allow” as shown in step #4 above.