Connect Adobe Workfront Fusion to Google Services with updated security measures

Access requirements

You must have the following access to use the functionality in this article:

To find out what plan, license type, or access you have, contact your Workfront administrator.

For information on Adobe Workfront Fusion licenses, see Adobe Workfront Fusion licenses.

Google Services restrictions

Google introduced restrictions on how users can use their API as of June 1st, 2020. These security measures protect Google users from leakage or misuse of their personal data on Google. The restrictions are related to the Gmail and Google Drive apps. For more information about these restrictions, see “Additional Requirements for Specific API Scopes” in the Google API Services User Data Policy

To access restricted scopes, the connected service (Adobe Workfront Fusion or any other service that wants to access the user’s data via the API) must be verified and must have a Letter of Assessment to prove that the service is secure and transparent about how they use the data. Workfront Fusion complies with all of Google’s requirements for access to restricted scopes. However, most of the third-party connected services in Workfront Fusion don’t have the Letter of Assessment, and therefore don’t comply with Google terms. Because of that, Workfront Fusion is not permitted to send data to these services.

Exceptions to Google Services restrictions

There are a few exceptions that make it possible to send data to an unapproved third-party service that doesn’t have the Letter of Assessment without violating any of the new restrictions. They differ based on G Suite with the Workfront Fusion OAuth client, G Suite with another OAuth client, or @gmail.com and @google.mail.com.

G suite with Workfront Fusion OAuth client

Workfront Fusion uses the Domain-wide Installation exception. Domain-wide Installation is suited for G Suite users, and allows users to integrate unapproved services without any limitations. If you are a G Suite user, you don’t have to perform any additional steps and can directly connect to unapproved services.

G suite with another OAuth client

G Suite users that prefer to use their own OAuth client instead of using the Workfront Fusion OAuth client can connect to Google Services through the Internal Use approach. This option is intended for advanced users. For instructions, see Connect Adobe Workfront Fusion to Google Services using a custom OAuth client.

@gmail.com and @googlemail.com gmailcom-and-googlemailcom

User that access Google Services through @gmail.com or @googlemail.com can connect to Google Services through the Personal Use approach. This option is intended for advanced users. For instructions, see Connect Adobe Workfront Fusion to Google Services using a custom OAuth client.

FAQ

What apps in Adobe Workfront Fusion are affected? what-apps-in-adobe-workfront-fusion-are-affected

Google Drive, Gmail, and Email (connected to Gmail account).

Do I have a G Suite account? do-i-have-a-g-suite-account

If your email address ends with @gmail.com or @googlemail.com your account is not a G Suite account. If your Google account ends with custom domain such as @my-company.com then it is a G Suite account.

What should I do if I’m @gmail.com or @googlemail.com user? what-should-i-do-if-im-gmailcom-or-googlemailcom-user

These new restrictions only apply if you are integrating Google Drive or Gmail. If you want to connect to Google Drive or Gmail, you can

If you want to integrate any other service than Google Drive or Gmail, these restrictions do not apply.

For instructions about connecting other Google Services to Workfront Fusion, see Connect the module’s app or web service to Workfront Fusion in the article Create a scenario in Adobe Workfront Fusion.

What should I do if I’m a G Suite user? what-should-i-do-if-im-a-g-suite-user

There is no required action.