Google Apps Connector for BlackBerry Enterprise Server Installation and Administration Guide User Manual
Page 32
32
Google Apps Connector for BlackBerry Enterprise Server Installation and Administration Guide
The Provisioning API is a feature in Google Apps. The Provisioning API allows other programs
such as the Google Apps Connector to read Google Apps account data.
OAuth is an open protocol to allow secure API authorization in a simple and standard method
from desktop and web applications. The protocol is described at the OAuth website at
The user account created in your Google Apps domain is used by the Google Apps Connector
and BlackBerry Enterprise Server. BlackBerry Enterprise Server will use this account to send
e-mails based on the different admin functions available in the BlackBerry Manager
application. This user does not require administrator access with in your Google Apps domain.
To confirm the Google Apps Sync setting, enable the Provisioning API and Two-legged
OAuth, and add the BlackBerry Enterprise Server user
1. In a Web browser, go to your Google Apps control panel. the URL is
http://www.google.com/a/cpanel/[domain]
where [domain] is your domain name, such as
example.com
.
2. Log in as the Google Apps Administrator for your domain.
3. In the Google Apps control panel, click the Service Settings tab and select Email. (or go
directly to the URL
https://www.google.com/a/cpanel/[your domain]/EmailSettings
)
4. Locate the feature Google Apps Sync and confirm Enable Google Apps Sync is checked.
If it is not checked, check the setting and save your change.
5. In the Google Apps control panel, click User and groups.
6. Go to the Settings tab. (or go directly to the URL
https://www.google.com/a/cpanel/
[your domain]/UserSettings
)
7. Check the box next to Enable provisioning API.
8. Click Save changes. The Provisioning API is now available.
9. Click Advanced Tools.
10. In the Authentication section, click “Manage OAuth Domain Key.” (or go directly to the
URL
https://www.google.com/a/cpanel/[your domain]/SetupOAuth
)
11. Next to your OAuth Consumer key, check “Enable this consumer key.”
12. Uncheck “Allow Access to All Apps” and save.
13. Click Advanced Tools -> Manage third party OAuth Client access. (or go directly to the
URL
https://www.google.com/a/cpanel/[your domain]/ManageOauthClients
)
14. Enter your domain name for the OAuth consumer key name, such as
example.com
.
15. Enter the URLs you want to grant access to for this OAuth Consumer:
https://mail.google.com/
https://www.google.com/calendar/feeds/
https://www.google.com/m8/feeds/
https://apps-apis.google.com/a/feeds/user/#readonly
https://apps-apis.google.com/a/feeds/calendar/resource/#readonly