Google Apps domain administratorsAdministrators

Google Apps Help

OAuth: Managing the OAuth key and secret

Location:New Admin console: Security > Advanced settings >
Authentication > Manage OAuth domain keyClassic Admin console:
Advanced Tools > Manage OAuth domain key (under the Authentication
section)The "Manage OAuth key and secret for this domain" page allows
you to enable, disable or update the OAuth consumer secret for your
domain. For the basic features of OAuth, see the "Overview of OAuth in
Google Apps".For sending OAuth requests to Google Apps, you can
either:Use the OAuth consumer key and consumer secret (HMAC-SHA1
signature method)orUpload a X.509 certificate (RSA signature
method)The consumer key and secret is usually preferred over the
certificate for performance reasons.OAuth consumer keyClick "Enable
this consumer key" if you want to generate OAuth requests with
it.OAuth consumer secretYou can regenerate a new consumer secret at
any time, for example, if you decide to no longer allow access from a
certain client.X.509 CertificateThis is an option to using the
consumer key and secret for signing requests. For more information on
generating a certificate, see "Generating a self-signing private key
and public certificate".Two-legged OAuth access controlClick "Allow
access to all APIs" to bypass any access control checks in the Google
Data API when using the the domain key. For example, if this setting
is enabled, a domain administrator can view and/or modify the Google
Data API's, such as Google Calendar or Google Document List feeds for
any user in their domain.Also some Google Apps applications, such as
the Google Apps Connector for BlackBerry Enterprise Server, require
this broad level of OAuth access.Following are the Google Data APIs
that currently support two-legged OAuth for Google Apps domains:Google
APIScopeCalendar Data
APIhttp(s)://www.google.com/calendar/feeds/Contacts Data
APIhttp(s)://www.google.com/m8/feeds/Documents List Data
APIhttp(s)://docs.google.com/feeds/Finance Data
APIhttp(s)://finance.google.com/finance/feeds/Sites Data
APIhttp(s)://sites.google.com/feeds/Spreadsheets Data
APIhttp(s)://spreadsheets.google.com/feeds/Calendar Resources HTTPS
Read Onlyhttps://apps-apis.google.com/a/feeds/calendar/resource/#readonlyGroups
Rosters HTTPS Read
Onlyhttps://apps-apis.google.com/a/feeds/group/#readonlyNicknames
HTTPS Read Onlyhttps://apps-apis.google.com/a/feeds/nickname/#readonlyUsers
HTTPS Read Onlyhttps://apps-apis.google.com/a/feeds/user/#readonlyAdditional
resourcesOAuth for Google Apps documentation: Comprehensive overview;
describes how to make a signed requests to any Google Data
API.Registration for Web Apps documentation: For third-party
developers to learn register their applications for access through
Google Apps using OAuth.How helpful is this article:

Extremely helpful

Google Apps domain administratorsAdministrators can build scripts and
custom applications that manage the user data for their domain through
Google Data APIs. For example, an administrator can use the Google
Documents Data List feed and two-legged OAuth to configure every user
in their domain with a Google Drive folder named "Human Resources"
that's populated with common employee forms. Some Google Apps
applications, such as the Google Apps Connector for BlackBerry
Enterprise Server, also require OAuth to be enabled.To learn about
managing the key and secret that's associated with your Google Apps
domain, and granting global access control, see Managing the OAuth key
and secret.Third-party software vendorsVendors may offer applications
that use two-legged OAuth to integrate with Google Apps. If the vendor
has registered their own consumer key and secret with Google, you can
grant access to the vendor's client application to a limited set of
Google resources on the Manage API client page.To learn about setting
up third-party or internal access to a specific set of Google Data
APIs, see Managing Client API access.






Google Apps Help

OAuth Overview

OAuth is an open standard authorization protocol that allows third
parties to access user data without the need to know a user's
password. Instead of users sharing their passwords directly an
application, OAuth acts as a "valet key" that applications use to
access a user's data and act on their behalf.With Google Apps for
Business and Education, administrators can use two-legged OAuth for
domain-wide delegation of authority. An application that has the OAuth
consumer key and secret (roughly equivalent to a role account username
and password) is allowed to act as any user in the domain when
accessing Google Data APIs. Unlike three-legged OAuth, users do not
need to give consent on an individual basis, as this decision is made
on their behalf by the administrator. Administrators can revoke the
key, change the secret, and control which APIs accept domain-wide
delegation.Two key groups can use two-legged OAuth, and the access
controls applied may be very different in each case.Google Apps domain
administratorsThird-party software vendorsAdditional resourcesOAuth
for Google Apps documentation: Comprehensive overview; describes how
to make a signed request to any Google Data API.Registration for Web
Apps documentation: For third-party developers to learn how to
register their applications for access through Google Apps using
OAuth.How helpful is this article:





Feature map (new vs. classic Admin console)

Google is phasing in a new version of the Admin console (sometimes
called the "control panel") that's customizable and easier to use. To
know whether you have the new version or classic version, look for the
blue tabs near the top of the page. The tabs only appear on the
classic Admin console. If you don't see the tabs, you have the new
Admin console.New Admin console dashboardClassic Admin console
dashboardThe following table describes the features and settings you
can access after you sign in to the Google Admin console. Each
description includes navigation instructions for both the classic and
new Admin consoles. If you're using the new admin panel and you can't
find the controls a navigation path references, you might need to add
the controls to the dashboard.In addition to the navigation paths
below, users with the new Admin console can use the search bar at the
top of each page to navigate to settings. Just start typing in the
search bar and select from the results that
appear.Feature/SettingDescription & LocationAdmin rolesManage access
to Admin console features and settings.Classic Admin console: On the
Domain settings tab, click Admin roles.New Admin console: On the
dashboard, click Admin roles.AnalyticsAnalyze traffic on your sites,
documents, presentations and spreadsheets.Classic Admin console: On
the Advanced tools tab, scroll to the Analytics section.New Admin
console: On the dashboard, click Other Google Services > Google
Analytics.AppearanceCustomize the appearance of your organization's
Google Apps sign-in box.Classic Admin console: On the Domain settings
tab, click Appearance.New Admin console: On the dashboard, click
Company profile > Personalization.Audit logView information on how
your organization's administrators use the Google Admin
console.Classic Admin console: On the Reports tab, click Audit log.New
Admin console: On the dashboard, click Reports > Audit
log.Authentication with OAuth and OpenIDProvide external apps with
secure access to your Google apps data.Classic Admin console: On the
Advanced tools tab, scroll to Authentication.New Admin console: On the
dashboard, click Security > Advanced settings.Billing and
subscriptionsManage payments, licenses, subscriptions, and
more.Classic Admin console: On the Domain settings tab, click either
Subscriptions and billing or Billing information.New Admin console: On
the dashboard, click Billing.Chrome devicesView Chrome device
information and manage the hierarchy of organizational units to which
administrators assign devices.Classic Admin console: On the Devices
tab, click Chrome OS.New Admin console: On the dashboard, click Chrome
devices.Communication settingsChoose which product news and email
updates you want to receive from Google.Classic Admin console: On the
Domain Settings tab, scroll to Communication preferences.New Admin
console: On the dashboard, click Company profile > Communication
settings.Company profile - general settingsSpecify basic organization
information (such as name and timezone), administrator contact
information, advertisement options, and more.Classic Admin console: On
the Domain Settings tab, click General.New Admin console: On the
dashboard, click Company profile > Company profile.Custom URLsCreate
simple, memorable web addresses for core Google apps.Classic Admin
console: On the Settings tab, select the service with the URL you want
to customize, then click General.New Admin console: On the dashboard,
click Company profile > Custom URLs.Domain namesAdd additional domains
to use with Google Apps and services, and create domain aliases for
your primary domain.Classic Admin console: On the Domain settings tab,
click Domain names.New Admin console: On the dashboard, click
Domains.GroupsGroup users to simplify communication, data access, and
more.Classic Admin console: Click the Groups tab.New Admin console: On
the dashboard, click Groups.Password strength requirementSpecify the
required lengths for your users' passwords.Classic Admin console: On
the Domain settings tab, click User settings > Adjust password
settings.New Admin console: On the dashboard, click Security > Basic
settings.Password strength monitoringView the strength of each user's
password.Classic Admin console: On the Domain settings tab, click User
settings > Adjust password settings > Monitoring.New Admin console: On
the dashboard, click Security > Password monitoring.Provisioning
APIEnable programmatic user account management and synchronization
with separate user management systems.Classic Admin console: On the
Domain settings tab, click User settings > Enable provisioning API.New
Admin console: On the dashboard, click Security > API
reference.ReportsReports on disk space, quota limits, and more.Classic
Admin console: Click the Reports tab.New Admin console: On the
dashboard, click Reports.Secure Data Connector (SDC)Connect gadgets,
applications, and spreadsheets to data behind a firewall.Classic Admin
console: On the Advanced tools tab, scroll to the Secure Data
Connector section.New Admin console: On the dashboard, click Security
> Advanced settings.Secure Sockets Layer (SSL)Force HTTPS connections
when users access most Google apps and services.Classic Admin console:
On the Domain settings tab, click General and scroll to the SSL
section.New Admin console: On the dashboard, click Security > Basic
settings > SSL.Service enablementMake apps and services accessible to
your organization's users. The types of apps and services are:Google
Apps for Business, including enterprise versions of Gmail, Calendar,
Drive, and more.Apps available from the Google Apps Marketplace.Other
Google services, including Google+, YouTube, and more.Classic Admin
console: On the Organization and users tab, click Services, and scroll
to the app you want to enable. If you don't see the app, click the
link to add more services, scroll to the app, and click Add it now.New
Admin console: On the dashboard, click the type of service you want to
enable (Google Apps, Marketplace Apps, or Other Google Services). The
Admin console lists services of that type. If the list does not
include the service you want to enable, click .Service
settingsConfigure your organization's Google apps and services,
including Google Apps for Business (such as Gmail and Drive),
Marketplace Apps, and other Google services.Classic Admin console: On
the Settings tab, select the app you want to configure.New Admin
console: On the dashboard, click the type of app you want to enable
(Google Apps, Marketplace Apps, or Other Google Services), then click
the name of the app.Single Sign-On (SSO)Integrate your LDAP or other
SSO system with the Google SAML-based SSO API.Classic Admin console:
On the Domain settings tab, click User Settings and scroll to the
Sign-in page section.New Admin console: On the dashboard, click
Security > Advanced settings.SupportView support contact information
and resources.Classic Admin console: Click the Support tab.New Admin
console: On the dashboard, click Support.Two-step verificationRequire
users to enter a verification code in addition to their username and
password when signing in to their account.First, enable two-step
verification in your organization:Classic Admin console: On the
Advanced tools tab, scroll to Authentication.New Admin console: On the
dashboard, click Security > Basic settings.Then, enroll users in
two-step verification.Classic Admin console: On the Settings tab,
select Security.New Admin console: On the dashboard, click Security >
Basic settings > Enforce 2-step verification on users.UsersManage user
accounts that provide access to Google Apps and services, and manage
the hierarchy of organizational units to which users belong.Classic
Admin console: Click the Organizations and users tab.New Admin
console: On the dashboard, click Users.







http://support.google.com/a/bin/answer.py?hl=en&answer=3035631

https://admin.google.com/rubyroadmail.mygbiz.com/AdminHome?firsttime=pre#SetupWizard/setuptask=CREATE_USERS_IN_CPANEL_SUBTASK




https://www.google.com/a/rubyroadmail.mygbiz.com/ServiceLogin?service=CPanel&passive=3600&cpbps=1&continue=https://admin.google.com/rubyroadmail.mygbiz.com/AdminHome?firsttime%3Dpre%23SetupWizard/setuptask%3DCREATE_USERS_IN_CPANEL_SUBTASK&followup=https://admin.google.com/rubyroadmail.mygbiz.com/AdminHome?firsttime%3Dpre%23SetupWizard/setuptask%3DCREATE_USERS_IN_CPANEL_SUBTASK#Email=your_user_name@rubyroadmail.mygbiz.com