Prior to October 2024 Google only permitted Third Party Authenticated access for login via App Passwords. This process is still supported by Campus Cafe, however Google has created an alternative separate process detailed here.

Create Cloud Console Project

1. Go to console.cloud.google.com and log in to your school’s environment.

2. Click APIs & Services.

3. In the upper left click the Project drop down.

4. In the upper right select New Project.

5. In the upper left from the Select a project menu select.
   
   

   Open

   

6. Name your project. For example, Campus Cafe Google MFA.

7. From Location select your organization.

8. Click Create. This will bring you to your new project page. It may take a minute for the project to create.

9. Click Select a Project, and in the window copy the Project ID to a separate file for Campus Cafe configuration. You’ll use this in Campus Cafe Web App configuration GOOGLE_PROJECTID.
   
   

   Open

   

Create API Credentials

1. In the Google console click Credentials.

2. Click +Create Credentials and select OAuth Client ID.
   
   

3. Under Application Type, select Web Application, and name it. For example CC Gmail MFA.
   
   

4. In Redirect URI enter https://###-web.scansoftware.com/cafeweb/redirectFromGoogle.html (where ### is your three-digit school code).

5. Click Create.

6. Copy the Client ID and the Client Secret and save them in a separate file.
   
   

7. Click OAuth Consent.

8. Click Internal.

9. Enter an App Name. For example Campus Cafe Gmail MFA.

10. Enter a support email. This is the email that will be displayed for users to contact with questions - a no-reply email is recommended.

11. Enter a Developer Contact Email. This person is notified of API failures.

12. Click Save and Continue.

13. On the Scopes screen, click Add or Remove Scopes.

14. In pop-out from the side, in the Filter box, type "Gmail". Select the checkbox next to the GMAIl API, select the checkbox next to the GMail API with the scope "https://mail.google.com", and click Update in the pop-out from the side. If you don’t see any results, skip to the next section.
    
    

15. On scopes click Save and Continue.

16. On the Test users screen click Save and Continue.

17. On the Summary scree click Back to Dashboard.

18. On the OAuth consent screen click Publish App.

No API results under selected scopes

If you’ve already added the GMail API to the scopes, skip this step.

If you don’t see any results when trying to select scopes, you may need to add a library to Google.

1. Click Google API Library.
   
   

2. Search for Gmail API, and select the Gmail API result.
   
   

3. On the next screen, click Enable.

4. Back in the Scopes window, click refresh on the browser, which will reset you to the OAuth Consent Screen. At the bottom, click Save and Continue to return to the Scopes screen.

5. Click Add or Remove Scopes and filter to Gmail API.

6. Select the checkbox next to the Gmail API with the scope "https://mail.google.com"

7. On scopes click Save and Continue.

8. On the Test users screen click Save and Continue.

9. On the Summary scree click Back to Dashboard.

10. On the OAuth consent screen click Publish App.

Configure Campus Cafe

1. Log in to Campus Cafe.

2. Go to Admin > Web App.

3. In Search enter GOOGLE_

4. Next to GOOGLE_PROJECTID select the checkbox and click Edit Selected. In Value enter the Project ID copied from the Select a Project menu pop up. If it wasn’t copied it down originally, it will still be available.

5. Click Update.

6. Next to GOOGLE_CLIENTSECRET select the checkbox and click Edit Selected. In Value enter the Client Secret from the Credentials tab in the Google Cloud API. If it wasn’t copied, it will still be available. Select the Web Client OAuth 2.0 Client ID created earlier by clicking on the name of that Client from the list; it will be on the right side of the next screen. Enter that value. Don’t enter the Client ID value displayed on the OAuth 2.0 Client ID list.

7. Click Update.

8. Next to GOOGLE_CLIENTID select the checkbox and click Edit Selected. In Value, enter the Client ID from the Credentials tab in the Google Cloud APIcopied earlier. If it was not copied earlier, this is the value on the same line as the name of the OAuth 2.0 Client ID created earlier. (There is a Copy button next to the truncated value.)

9. Click Update.

10. Go to Admin > Refresh Data Cache.

11. Authenticate your email.