Salesforce Docs Portal

Create an Authentication Provider for Google Drive

To use Google Drive as an external data source, create an authentication provider for it in Salesforce. The process begins with creating a related project in the Google Developers console.

Required Editions

Available in: Salesforce Classic
Available in: Professional, Enterprise, Performance, Unlimited, and Developer Editions
User Permissions Needed
To create authentication providers:

Customize Application

AND

Manage Auth. Providers

For detailed visuals, tips, and troubleshooting, see the Files Connect Setup Guide and User Guide.

  1. Using the credentials of your Google App for Work admin account, log in to https://console.cloud.google.com.
  2. In the title bar, expand Select Project and click Create Project.
  3. Enter a project name and location, and click Create.
  4. In the project dashboard, click the menu icon in the upper left, and then click APIs & Services.
  5. In the API manager, go to the Library tab and search for Google Drive API.
  6. In the search results, click Google Drive API, and then click Enable API.
  7. In the menu on the left, click Credentials.
  8. In the OAuth Consent Screen tab, enter a valid email address and application name, and click Save.
  9. In the Credentials tab, click Add credentials, and select OAuth client ID.
  10. Select Web application, and click Create.
  11. Copy the client ID and client secret values to a text file.
    Use these values next, when you create an authentication provider in Salesforce.
  12. In Setup, enter Auth. Providers in the Quick Find box, then select Auth. Providers.
  13. Click New.
  14. For Provider Type, select OpenID Connect, and then set the following options:
    • Name — Enter the name you want to appear in Salesforce.
    • URL Suffix — Enter the suffix at the end of the URL path. For example, in the path, https://login.salesforce.com/services/authcallback/00Dx00000000001/MyGoogleProvider, the suffix is “MyGoogleProvider”
    • Consumer Key — Enter the client ID you copied when creating the Google project.
    • Consumer Secret — Enter the client secret you copied when creating the Google project.
    • Authorize Endpoint URL —Enter https://accounts.google.com/o/oauth2/auth?access_type=offline&approval_prompt=force
    • Token Endpoint URL — Enter https://accounts.google.com/o/oauth2/token
    • Default Scopes — Enter openid email profile https://www.googleapis.com/auth/drive
  15. Click Save.
  16. At the bottom of the Auth. Provider detail page, copy the Callback URL entry to a text file. Use this URL when you edit the Google project next.
  17. In the API Manager, in the menu on the left, click Credentials.
  18. Click the previously created web app.
  19. In the Authorized Redirect URIs section, add the Callback URL you copied when creating the authentication provider in Salesforce, and click Save.