Google Workspace integration with MaaS360

Information about integrating IBM® MaaS360® with Google Workspace. This integration provides visibility into devices that have Google Workspace accounts configured as an enterprise mail resource and grants the ability to implement access control rules.

1. Enable the Android Enterprise solution through Google Accounts (G-Suite for business) in the IBM MaaS360 Portal. For detailed instructions in enabling Android Enterprise, see Integrating with a Google Workspace account.
2. Connect to the Google directory to synchronize the users to the IBM MaaS360 Portal.
   1. In the IBM MaaS360 Admin console, go to Services > Mobile Device Management > Enable Android Enterprise and click Connect to Google Directory.
   2. Open https://console.developers.google.com and log in to the Google Cloud Platform by using your administrator account.
   3. From the Dashboard, click APIs & Services > Enable APIS and Services > To view this page, select a project.
   4. Click Create project.
   5. Enter the project name as MaaS360.
   6. Optional: Under the project name, click Edit, and enter the Project ID. Input MaaS360-Corporate ID as the project ID.
   7. Click Create.
3. Enable the Admin SDK.
   1. From the Dashboard, click Enable APIS and Services.
   2. On the API Library page, search for the Admin SDK, open, and click Enable.
   3. Go to the Credentials section on the sidebar.
   4. Click Configure Consent Screen and select Get started.
   5. Enter App Information and select External Audience.
   6. Set Contact Information, review the Google API Services: User Data Policy and click Create.
   7. Select Create OAuth client.
   8. On the Create OAuth client ID page, select the Application Type > Web Application.
   9. Enter the URL that you use to access your instance of MaaS360.
      https://portal.fiberlink.com
      Note: To determine the URL for your instance of MaaS360, go to IBM MaaS360 Portal home page, and click Setup > Services > Enterprise Email Integration > Configure Google Credentials, and then click Next. The URLs are listed in Step 6.
      • For authorized JavaScript origins, enter the following address: https://URL for your MaaS360 instance
      For example, https://portal.fiberlink.com
      • For authorized redirect URIs, enter the following address: https://URL for your MaaS360 instance/cloud-integration-portal/googleAuthCallBack/response
      For example, https://portal.fiberlink.com/cloud-integration-portal/googleAuthCallBack/response
   10. Click Create.
       Note: Make sure that you note the Client ID and the Client Secret for your records.
   11. From the Credentials page, download the JSON file from the MaaS360 client that you created.
   12. Click Next to continue to configure the Google credentials.
4. Configure Google credentials.
   1. Enter the administrative email address of the administrator who created the API.
   2. Upload the JSON file.
   3. Enter an email address for failure notifications.
   4. Select Upload.
   5. The credentials configured successful page is displayed.
5. Click Authorize Now to authorize MaaS360 to access data from Google Directory.
6. Select an email account to login to MaaS360 and click Allow.
   In the IBM MaaS360 Portal, the status is displayed with a Connected sign and a green checkmark in the Services page.