Skip to main content

Supported Features

Account Deletion Account Provisioning

Integration Overview

There are two integration methods for Google Cloud Platform: OAuth and API Key. Review the features below and choose the method that best fits your management needs.
Available Actions / Integration MethodOAuth (New)API (Old)
Integration unitAll projects in bulkPer project
AdministratorAccount administratorProject administrator
Supported actionsUser sync, deletionUser sync only

Prerequisites

Logging In to Google Cloud Platform

Go to the Google Cloud Platform login page and enter the email address and password of an administrator account.

Enabling the Cloud Resource Manager API

  1. After logging in to Google Cloud Platform, create a project or navigate to the project you want to integrate.
  2. Go to APIs & Services > Enabled APIs & Services and click Enable APIs and Services.
APIs & Services screen
  1. Search for Cloud Resource Manager API and click Enable.
Cloud Resource Manager API search

Creating an OAuth Application for Integration

  1. After logging in to Google Cloud Platform, go to APIs & Services > OAuth consent screen.
  2. Select Internal for the User Type and click Create. If you see “Error 403: org_internal” and the integration fails, create with User Type External.
OAuth consent screen
  1. Enter the application name (e.g., Admina), user support email, and developer contact email in the app information, then click Save and Continue.
  2. Click Add or Remove Scopes and add one of the following Scope URLs. The image shows an example scope configuration for Read & Write.
  • Read & Write (to allow user sync and deletion): https://www.googleapis.com/auth/cloud-platform
  • Read Only (to allow user sync only): https://www.googleapis.com/auth/cloud-platform.read-only
Scope configuration After adding the scope, click Back to Dashboard.
  1. Click the Credentials menu, then click + Create Credentials > OAuth client ID.
Create credentials
  1. Fill in the OAuth client ID creation form as follows and click Create.
  • Application type: Web application
  • Name: Any name (e.g., Admina)
  • Authorized redirect URIs: https://itmc.i.moneyforward.com/oauth/callback
Create OAuth client ID
  1. Copy the displayed Client ID and Client Secret values.
Client ID confirmation

Integration Setup

  1. In the MoneyForward Admina integrations screen, search for Google Cloud Platform. Select the OAuth tab.
  2. Enter the Client ID and Client Secret, then click Connect. For Permissions, select the option that matches the scope configured in step 7.
OAuth integration settings When the integration succeeds, registered user information will appear in the account list. If the process does not complete successfully, click Edit from the Status tab on the integrations screen and try connecting again. If the issue persists, please contact us via chat. For an overview of the Google Cloud Platform integration, visit the integration page.

API Key Integration (Old)

Prerequisites

Logging In to Google Cloud Platform

Go to the Google Cloud Platform login page and enter the email address and password of an administrator account.

Enabling the Cloud Resource Manager API

  1. After logging in to Google Cloud Platform, navigate to the project you want to integrate.
Integration is performed on a per-project basis. Select the project whose users you want to retrieve, then complete the integration. You can integrate multiple projects by repeating this process.
  1. Go to APIs & Services > Enabled APIs & Services and click Enable APIs and Services.
APIs & Services screen
  1. Search for Cloud Resource Manager API and click Enable.
Cloud Resource Manager API search

Creating a Service Account for Integration

  1. Go to APIs & Services > Credentials, click [CREATE CREDENTIALS], and select [Service account].
Credentials screen
  1. Enter any name in the Service Account Name field and click [CREATE AND CONTINUE].
Create service account
  1. Configure the role. Select Security Reviewer and click Continue. Finally, click Done.
Role configuration

Creating a Private Key

  1. From Service Accounts, click the service account name you created, then go to the [KEYS] tab > ADD KEY > Create new key.
KEYS tab
  1. Select JSON as the Key type and click CREATE.
Create JSON key
  1. A JSON file will be downloaded — save it. Open it with a text editor to review the contents. All parameters required for the integration are included in this JSON file.
Prerequisites are now complete.

Integration Setup

  1. In the MoneyForward Admina integrations screen, search for Google Cloud Platform. Switch to the API tab.
Select API tab
  1. Enter the following values from the downloaded JSON file and click Connect.
API integration settings input screen
  • Workspace Key: Enter the project_id
  • Service Account Email: Enter the client_email
  • Private Key: Enter the private_key. Enter from -----BEGIN PRIVATE KEY----- to -----END PRIVATE KEY-----. (The leading " and trailing \n", are not needed.)
If an error appears, refer to the following help article.
“This app isn’t verified” error from Google “This app isn’t verified by Google” error When the integration succeeds, registered user information will appear in the account list. If the process does not complete successfully, click Edit from the Status tab on the integrations screen and try connecting again. If the issue persists, please contact us via chat. For an overview of the Google Cloud Platform integration, visit the integration page.
Last modified on June 18, 2026