How to create a Google Cloud project and OAuth consent screen for your Google Chat application before generating OAuth credentials?

Google Cloud Project Creation

Before you can create OAuth credentials, you need a Google Cloud project. This project serves as a container for all your APIs and authentication configurations.

Note: If you already have an account with ‘Google Cloud console” you can skip Step 1.

STEP 1: Access Google Cloud Console

The Google Cloud Console is where you'll manage all your cloud resources and OAuth configurations.

Instructions:

1. Navigate to https://console.cloud.google.com/ 
2. Sign in with your Google Account (use an account with admin access)
3. If you see a welcome screen, read through it and click "Agree and continue"
4. Accept the terms of service if prompted

STEP 2: Create a New Project

A Google Cloud project is a container that holds all your APIs, credentials, and settings.

Instructions:

1. Click on the Project Selector dropdown on the top left of the page.
   
2. In the popup window that appears, click the blue "NEW PROJECT" button. 
   
3. A form will appear asking for project details:
   • Project Name: Enter a meaningful name like "My Backup Application" or "OAuth Integration Project"
   • Organization: This will likely be auto-filled or show "No organization"
   • Parent resource: Select your organization.
   
4. Click on "CREATE" button.
   
5. You'll see a notification at the bottom right indicating "Project creation in progress." Once complete, you'll be automatically switched to your new project.

STEP 3: Enable required API

Before SysCloud can access Google Chat resources, you must enable the Google Chat API in your Google Cloud project.

Instructions:

1. Go to the home page of the project created.

2. Go to APIs & Services > Library.

   

3. Search for Google Chat API in the search bar and select it. 

   
   
   

4. Click Enable.
   

5. Wait for the API to be enabled. You’ll see a loading indicator while Google enables the API.

Note: When you enable an API, Google Cloud grants your project access to that API. This doesn't immediately consume resources; it just makes the API available for your project to use.

STEP 4: Configure the Google Chat app

Google Chat requires a Chat app configuration before the Google Chat API can be used. This is a one-time setup for the selected project.

Instructions:

1. In Google Cloud Console, go to APIs & Services > Google Chat API > Configuration tab.

   
   

2. Click Configure, if you have not already configured the app.

   • App name: Enter a recognizable name, such as SysCloud Google Chat Backup.
   • Avatar URL: Enter an avatar URL. This can be a placeholder image URL.
   • Description: Enter a short description, such as Google Chat backup with SysCloud.

     Fill out the basic information for your application:

3. Under Functionality settings,

   1. Select App works in direct messages and spaces.

   2. Set Connection type to API-based.

    

4. In the Event handler URL field, enter the event handler URL.
   Example: https://example.com/handler

5. Click Save.

    

Note: This step is required only once per project. After the Google Chat app is configured, you do not need to repeat this step for the same project.

PHASE 2: OAuth 2.0 consent screen configuration

The OAuth consent screen is what users see when they are asked to authorize your application. It should clearly explain what your application does and what permissions it needs.

STEP 5: Create OAuth 2.0 consent screen

Instructions:

1. Navigate to 'Google Cloud' home page with your project selected.
   
2. In the left sidebar under "APIs & Services," click "OAuth consent screen"
   
3. Click on 'Get Started'.
   

STEP 6: Configure consent screen details

Instructions:

1. Configure app information
   1. Application Name: Enter your application's name (e.g., "MyCompany Backup Service"). This will appear on the consent screen, so make it something users will recognize.
   2. User Support Email: Enter an email address where users can contact you if they have questions about your application's privacy or security.
2. Click on 'Next'
   
3. Configure audience
   1. External: Choose this option (recommended for most applications). This allows you to create an application that can be used by anyone with a Google account.
   2. Internal: Choose this only if your organization specifically requires it. This limits access to users within your Google Workspace domain.
4. Click on 'Next'
   
5. Developer Contact Information: Enter your contact email (e.g., admin@mycompany.com). This is where Google will contact you if there are issues with your application.
6. Click on 'Next'
   
7. Agree to Google terms and 'Continue'
   
8. Click on 'Create'
   
9. Click on 'Branding' in the left navigation and scroll-down to find 'Authorized domains'.
   
10. Authorized Domains: Add the domain(s) where your application is hosted:
    • Click "Add Domain"
    • Enter your domain name (e.g., backup.mycompany.com)
    • You may need to verify domain ownership. If prompted, follow Google's verification process.
    • Add multiple domains if your application is hosted in multiple locations
11. Click on 'Save'.
    

STEP 7: Define OAuth scopes

Scopes define what permissions your application is requesting.

For Google Chat backup, add the required scopes that allow SysCloud to access Google Chat spaces, memberships, messages, users, and groups.

Instructions:

1. On the left navigation, click Data access.

2. Click ADD OR REMOVE SCOPES.

   

3. A scope selection dialog will appear with a search bar and list of available scopes.

4. Add all required scopes for this integration. For each scope, either:

   • Search for it by name in the search box.
   • Scroll to find it in the list.
   • Click the checkbox next to the scope to select it.
   • Clear the search bar and repeat the steps for the next scope.

   

5. Once you've selected all required scopes, click UPDATE.

6. Click Save.

    

Scope summary table

Click here to know, how to generate the OAuth client credentials to connect your Google Admin Console to SysCloud backup application.