---
title: "Google Email Integration with OAuth 2.0"
slug: "google-email-integration-with-oauth-2-0"
description: "You can set up email integration with the OAuth 2.0 protocol with or Google.The instructions below can be applied to incoming or outcoming email integration or both."
updated: 2026-06-10T14:45:23Z
published: 2026-06-10T14:45:23Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://documentation.sysaid.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Google Email Integration with OAuth 2.0

You can set up email integration with the OAuth 2.0 protocol with [Microsoft 365](/v1/docs/microsoft-365-email-integration-with-oauth-2-0) or Google. The instructions below can be applied to incoming or outgoing email integration or both.

## Setting up outgoing/incoming email integration with the OAuth 2.0 protocol

Follow these steps to set up the email integration:

### Step #1: Setting the Protocol in SysAid

1. In SysAid, go to **Settings** > **Setup** > **Email Integration List**.
2. Click**+New.**
3. Go to the **Outgoing Email** tab.
4. From the Protocol drop-down, select **OAuth 2.0**.
5. Select **Google**.

### Step #2: Creating a project in Google

1. Navigate to the [Google Cloud Platform Console](https://console.developers.google.com/). If you haven't used this Google Cloud Platform Console yet, agree to their terms and conditions.
2. Click the drop-down next to the Google Cloud logo in the top left corner and select a project****.
3. Click **New Project**in the top right corner.
4. Enter a Project name, select an organization and location, and click **Create**.

### Step #3: Adding Gmail API and Google Calendar API scopes

1. From the navigation menu, select **APIs & Services** > + **Enabled APIs & Services**.
2. Search for **Gmail API** and select it from the search results.
3. Click **Enable**.
4. Go back to the API Library search page.
5. Search for **Google Calendar API**and select it from the search results. Make sure you select the standard API published by Google, not enterprise connectors or migration tools.
6. Click **Enable**.

### Step #4: Creating a service account

1. In the [Google Cloud Platform Console](https://console.developers.google.com/), go to **API & Services** > **Credentials.**
2. Click **+** **Create Credentials** > **Service Account**.
3. Enter any name for your service account.
4. Click **Create and close**.

### Step #5: Setting owner access

> [!NOTE]
> Please note:
> 
> If you already have the Google Auth Platform configured, skip to step #11.

1. Go to **I AM & Admin** > **Service accounts** > select the service account > **Principals with access** tab.
2. Click **Grant access.**
3. Under**Add principals,**add the service account email address**.**
4. Set the role to **Owner**.
5. Click **Save**.
6. Go to **Google Auth Platform** > **Clients**.
7. Click **Get started** or **Create a client**.
8. Choose **Internal** as the audience type and click **Next**.
9. On the next screen, fill in the**contact information** field.
10. Finish the process and click **Create**.
11. From the left-hand menu under **Google Auth Platform**, click on the **Clients**tab.
12. Click + **Create client**.
13. Set the **Application type** to **Web application**. **![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXcd1191BWuISd02u0igEHjZdXo1CZdSfJ5fu7Mr5jYsMXcOzQ_iTvPOvcx9bPcYUpWWP4AUq0_hKGr3is9l2CrHF2A1AlB-JaZ-e9d9xx30d1doFfIL8V4VH_NrzHuKrMaQFce4nIXynP4OclVtkGU?key=r39CqijBDaaC4J_-YmOoMQ)**
14. Enter a name for the application, such as “SysAid Email Integration”, and click**Create**.
15. Click **Download JSON,** then click **OK.** ![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXcrpiPcqN9v58pS1pGW3uFfHEVVoYnkIWSO3sE8u4oXDLzPU61QGNiOU1AUdchxms_6uVJ8tRp2VdW3sg3e8amjBu41Y8zsa6YQDZDDlF4im2bPi-4UeADA_LDe-wHC8jYdXjM9ZTPb_wAxOWXTXJo?key=r39CqijBDaaC4J_-YmOoMQ)
16. Look at the left-hand navigation pane under **Google Auth Platform** and click on the **Data Access** tab.
17. Click **Add or remove scopes**. A side drawer will open.
18. Use the filter table to find the **Gmail API,** check the box next to `https://mail.google.com/` (which grants full read/write/send/delete access), and click **Update**. Repeat this for the Google Calendar API scope `https://www.googleapis.com/auth/calendar`.

> [!NOTE]
> Please note:
> 
> If the option you are searching for doesn't appear in the drop-down menu, you may need to enable the API on your account: Click the link for the**Google API Library**, search for Gmail API, and follow the instructions for enabling the API. ![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXdg3j5UhpKb2D7HXF6lMyIsQm58xxKKITvmKxDUASDmbm5HQIfL5YGzivJIWX3CJwpSykH7ssB6zHNvkS3smXsWCie8mjM2EUPWW8vyuCGDEOGKXr82Sx62-l9mZ8S9iTi7fGeAmMFimmDlmegVaQ?key=r39CqijBDaaC4J_-YmOoMQ)
19. Click **Update**.
20. Click **Save**.
21. go to**IAM and Admin** > **Service Accounts**. ![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXcctM2Z7eZKU5Wl-DD7r2P5yXSVO67T1YY4E4eEDznXKB5vnoq7uGSlQNuoALkKAGECZdmnzxTMncshFf-eyuHQIbTb_jrfa2GDPA3DwsHxha57qX99vNBE7uQ4NDNp79VIomMgNS_uQs9oPvpXVHk?key=r39CqijBDaaC4J_-YmOoMQ)
22. Click on your newly created Service Account from the list to open its details page.
23. Go to the **Keys** tab at the top, click **Add Key**> **Create new key.**
24. Select **JSON**, and click **Create** to download your file.
25. Switch back to the **Details** tab (or scroll down) to the **Domain-wide Delegation** section.
26. Copy the Client ID.
27. Click **View Google Workspace Admin Console.**

### Step #6: Configuring the Google Admin console

1. Navigate to the [Google Admin console](https://admin.google.com/).
2. Go to **Security** > **Access and data control** > **API controls**. Right on that main page, you will see a card overview for Google Services.
3. In the **Domain Wide Delegation** pane, select **Manage Domain Wide Delegation**.
4. Click **Add new** at the top of the table. Paste your Client ID, and in the OAuth Scopes field, paste: `https://mail.google.com/`, `https://www.googleapis.com/auth/calendar `(separated by a comma).
5. Click **Authorize**.

### Step #7: Entering the generated values in SysAid:

1. Open the JSON file you generated.
2. Copy the value of the `client_id` parameter and paste it into the **Service Account** field in SysAid.
3. Copy the value of the `private_key` parameter and paste it into the **Private Key** field in SysAid (remove the beginning and end markings).

Follow the instructions in the related content below to fill out the rest of the email form. Be sure that the inbox that you set up for incoming email integration is dedicated specifically for **incoming email integration** with SysAid and not used for any other purposes.

## Email processing behavior

When Google Email Integration with OAuth 2.0 is enabled, SysAid continuously monitors the integrated Gmail mailbox for new incoming emails.

All emails sent to the integrated email address are automatically processed by SysAid and used to create service records. Once an email is successfully processed, it is removed from the Inbox to prevent duplicate service record creation.

In Gmail, emails removed by automated integrations are moved to the **Trash**folder. This behavior is part of Gmail’s standard design for OAuth 2.0–based access and automated message handling.

Emails in the Trash folder are retained for **30 days**, after which they are permanently deleted by Google.

#### Viewing processed emails

To locate emails that were processed and removed from the Inbox, open the Trash folder in Gmail. All processed emails remain available there until the 30-day retention period expires.

#### Keeping a copy of incoming emails (optional)

If you want to retain a visible copy of all incoming emails, you can configure SysAid to save copies to a dedicated folder.

To do this, go to **Settings**> **Setup**> **Email**> **Incoming Email** and fill in the Send a copy of the incoming emails to field (available for Enterprise editions only). When configured, SysAid will store a copy of each incoming email in the selected folder instead of relying on the Trash.

Alternatively, Gmail filters and labels can be used to apply a label to incoming emails before they are processed by SysAid.

To learn more, see [Incoming Email Integration Form](https://documentation.sysaid.com/docs/incoming-email-integration-form#incoming-email-settings).

**Related content** [Email list](/v1/docs/email-integration-list) [Required network access](/v1/docs/required-network-access) [Email form](/v1/docs/email-integration-form) [Outgoing email](/v1/docs/outgoing-email-integration-form) [Incoming email](/v1/docs/incoming-email-integration-form) [Microsoft 365 Email Integration with OAuth 2.0](/v1/docs/microsoft-365-email-integration-with-oauth-2-0) [Email rules](/v1/docs/email-rules)