> ## Documentation Index
> Fetch the complete documentation index at: https://support.i.moneyforward.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Error Displayed During Google OAuth Integration

> Troubleshooting errors that occur when connecting Google-related services

#### **Problem**

The following error may appear when connecting Google-related services.

```
**Error 400: admin_policy_enforced**

Access to account data is restricted
by a policy within your organization.
Contact your administrator at XXX for details.
```

<img src="https://mintcdn.com/moneyforwardi/abaHWZT0tTzI_Qae/images/it-management/x6sms6m4ja/1783673055302-request-b.png?fit=max&auto=format&n=abaHWZT0tTzI_Qae&q=85&s=dae6525067b743bb8b07352c8781583d" alt="Error screen" width="428" height="480" data-path="images/it-management/x6sms6m4ja/1783673055302-request-b.png" />

#### **Possible Causes**

#### **"Block all third-party API access" is turned on**

Go to `Security` > `Data access and control` > `API controls` in the [Google Workspace Admin Console](https://admin.google.com/ac/owl). If **Block all third-party API access** is enabled there, the integration may fail.

<img src="https://mintcdn.com/moneyforwardi/bIgq3Rd2uv4StPh1/images/it-management/x6sms6m4ja/1671700770252-image.png?fit=max&auto=format&n=bIgq3Rd2uv4StPh1&q=85&s=54aa368abb1699e280b75757244f8cc5" alt="Admin console setting" width="2994" height="1440" data-path="images/it-management/x6sms6m4ja/1671700770252-image.png" />

#### **API access to Google Workspace Admin Console is set to Restricted**

Go to `Security` > `Data access and control` > `API controls` > `Manage Google services` in the [Google Workspace Admin Console](https://admin.google.com/ac/owl):

[https://admin.google.com/ac/owl/list?tab=services](https://admin.google.com/ac/owl/list?tab=services)

If the access policy for **Google Workspace Admin Console** is set to `Restricted`, the integration may fail.

<img src="https://mintcdn.com/moneyforwardi/bIgq3Rd2uv4StPh1/images/it-management/x6sms6m4ja/1671702585143-image.png?fit=max&auto=format&n=bIgq3Rd2uv4StPh1&q=85&s=cdb2bc0ab976920ad15810348c1e9f23" alt="Admin console API setting" width="2274" height="1408" data-path="images/it-management/x6sms6m4ja/1671702585143-image.png" />

#### **This service is explicitly blocked**

Open the [Google Workspace Admin Console](https://admin.google.com/ac/owl) and go to `Security` > `Data access and control` > `API controls`. Then select [Manage third-party app access](https://admin.google.com/ac/owl/list?tab=apps) and search for the application below.

If its access status is `Blocked` or `Restricted`, the integration will fail.

```
App ID: 833359967166-qls05tncj19vnh92ovkj7smpt1eqh45j.apps.googleusercontent.com
App name: Money Forward ITMC
Support: it@i.moneyforward.com 
```

<img src="https://mintcdn.com/moneyforwardi/bIgq3Rd2uv4StPh1/images/it-management/x6sms6m4ja/1671702816177-image.png?fit=max&auto=format&n=bIgq3Rd2uv4StPh1&q=85&s=809ecdc7bb0ddb0514433f354e668e09" alt="App block setting" width="2946" height="1052" data-path="images/it-management/x6sms6m4ja/1671702816177-image.png" />

#### **Resolution**

Change the status from `Block` to `Allow` for each cause listed above.

If your organization's policy requires you to grant access only to this service, follow these steps.

* Open the [Google Workspace Admin Console](https://admin.google.com/ac/owl). Go to `Security` > `Data access and control` > `API controls` > [Manage third-party app access](https://admin.google.com/ac/owl/list?tab=apps).

<img src="https://mintcdn.com/moneyforwardi/bIgq3Rd2uv4StPh1/images/it-management/x6sms6m4ja/1671703229207-image.png?fit=max&auto=format&n=bIgq3Rd2uv4StPh1&q=85&s=dacb88662217fee53e237125ffdfad28" alt="Manage third-party app access" width="2880" height="1292" data-path="images/it-management/x6sms6m4ja/1671703229207-image.png" />

* Select `Add app` > `OAuth App Name or Client ID`.

<img src="https://mintcdn.com/moneyforwardi/bIgq3Rd2uv4StPh1/images/it-management/x6sms6m4ja/1671703378170-image.png?fit=max&auto=format&n=bIgq3Rd2uv4StPh1&q=85&s=7257bdf646de75260ecec84cd1438b87" alt="Add app" width="2452" height="1270" data-path="images/it-management/x6sms6m4ja/1671703378170-image.png" />

* Enter the client ID below in the search field and click the search button. Select `Money Forward ITMC`.

<img src="https://mintcdn.com/moneyforwardi/bIgq3Rd2uv4StPh1/images/it-management/x6sms6m4ja/1671703533184-image.png?fit=max&auto=format&n=bIgq3Rd2uv4StPh1&q=85&s=18c59ecf9b05a42dffdac5d44081dc8d" alt="Search by client ID" width="2914" height="1210" data-path="images/it-management/x6sms6m4ja/1671703533184-image.png" />

Client ID

```
833359967166-qls05tncj19vnh92ovkj7smpt1eqh45j.apps.googleusercontent.com
```

* Select the same client ID.

<img src="https://mintcdn.com/moneyforwardi/bIgq3Rd2uv4StPh1/images/it-management/x6sms6m4ja/1671703623881-image.png?fit=max&auto=format&n=bIgq3Rd2uv4StPh1&q=85&s=4d5ff1a18bea93d3d7b1bebbb3c08285" alt="Select client ID" width="2960" height="1276" data-path="images/it-management/x6sms6m4ja/1671703623881-image.png" />

* Set the app access permission to `Trusted: Can access all Google services`, then click `Configure`.

<img src="https://mintcdn.com/moneyforwardi/bIgq3Rd2uv4StPh1/images/it-management/x6sms6m4ja/1671703717460-image.png?fit=max&auto=format&n=bIgq3Rd2uv4StPh1&q=85&s=8cac5a6d73458802ae065564a3603fd6" alt="Access permission setting" width="2848" height="936" data-path="images/it-management/x6sms6m4ja/1671703717460-image.png" />

This service is now configured to allow Google integration.

Close the [login screen](https://itmc.i.moneyforward.com/login), reopen it, and connect to Google Workspace again.

[Google Workspace](/en/integrations/n0zl359vup-google-workspace)