OAuth for G-Suite Adapter Configuration Methods

As of version 4.1, the G-Suite Adapter supports two different forms of OAuth2 authentication:

GOOGLE

The original form uses credential type GOOGLE with defineGoogleOAuthCredential() and is based on the Installed Applications scenario. For most uses, this form is the easiest to configure and use, and is sufficient for most usages of the G-Suite Adapter.

GOOGLE_EXTENDED

The new form uses credential type GOOGLE_EXTENDED with defineGoogleExtendedOAuthCredential() and is based on the Service Account scenario. While more difficult to configure and use, this form provides some additional flexibility to impersonate any user within the domain without needing explicit approval from each user. In conjunction with the new callGoogleAPI() action, this allows you to manage Calendars and Google Drive files for individual users, which an admin account would not normally be able to do.

Both GOOGLE and GOOGLE_EXTENDED credentials require the creation of a Google Cloud Platform project. A single project can be used for multiple credentials of either type, with the limitation that the credentials within the same project will all share the same G-Suite API Quotas.