Google Cloud Platform

​

Integration Specifications

​

Integration Overview

​

OAuth Integration (Recommended)

​

Prerequisites

​

Required permissions

• resourcemanager.projects.list (to list projects)
• resourcemanager.folders.list (to list subfolders so their projects can be found)
• resourcemanager.projects.getIamPolicy (to get user and role information for each project)
• resourcemanager.projects.setIamPolicy (if you use account creation or deletion)

​

Logging In to Google Cloud Platform

​

Enabling the Cloud Resource Manager API

1. After logging in to Google Cloud Platform, create a project or navigate to the project you want to integrate.
2. Go to APIs & Services > Enabled APIs & Services and click Enable APIs and Services.
3. Search for Cloud Resource Manager API and click Enable.

​

Creating an OAuth Application for Integration

1. After logging in to Google Cloud Platform, go to APIs & Services > OAuth consent screen.
2. Select Internal for the User Type and click Create. If you see “Error 403: org_internal” and the integration fails, create with User Type External.
3. Enter the application name (e.g., this service), user support email, and developer contact email in the app information. Then click Save and Continue.
4. Click Add or Remove Scopes and add one of the following Scope URLs. The image shows an example scope configuration for Read & Write. After adding the scope, click Back to Dashboard.

   Item	Value
   Read & Write (to allow user sync, creation, and deletion)	https://www.googleapis.com/auth/cloud-platform
   Read Only (to allow user sync only)	https://www.googleapis.com/auth/cloud-platform.read-only

   
5. Click the Credentials menu, then click + Create Credentials > OAuth client ID.
6. Fill in the OAuth client ID creation form as follows and click Create.

   Item	Value
   Application type	Web application
   Name	Any name (e.g., this service)
   Authorized redirect URI	https://itmc.i.moneyforward.com/oauth/callback

   
7. Copy the displayed Client ID and Client Secret values.

​

Integration Setup

1. in the integrations screen, search for Google Cloud Platform. Select the OAuth tab.
2. Enter the Client ID and Client Secret, then click Connect. For Permissions, select the option that matches the scope configured in step 4.
3. When the integration succeeds, registered user information will appear in the account list. If the process does not complete successfully, click Edit from the Status tab on the integrations screen and try again. If the issue persists, please contact us via chat.

​

API Key Integration

​

Prerequisites

​

Logging In to Google Cloud Platform

​

Enabling the Cloud Resource Manager API

1. After logging in to Google Cloud Platform, navigate to the project you want to integrate.
   Integration is performed on a per-project basis. Select the project whose users you want to retrieve, then complete the integration. You can integrate multiple projects by repeating this process.
2. Go to APIs & Services > Enabled APIs & Services and click Enable APIs and Services.
3. Search for Cloud Resource Manager API and click Enable.

​

Creating a Service Account for Integration

1. Go to APIs & Services > Credentials, click [CREATE CREDENTIALS], and select [Service account].
2. Enter any name in the Service Account Name field and click [CREATE AND CONTINUE].
3. Configure the role. Select Security Reviewer and click Continue. Finally, click Done.

​

Creating a Private Key

1. From Service Accounts, click the service account name you created, then go to the [KEYS] tab > ADD KEY > Create new key.
2. Select JSON as the Key type and click CREATE.
3. A JSON file will be downloaded — save it. Open it with a text editor to review the contents. All parameters required for the integration are included in this JSON file. Prerequisites are now complete.

​

Integration Setup

1. in the integrations screen, search for Google Cloud Platform. Switch to the API tab.
2. Enter the following values from the downloaded JSON file and click Connect.

   Item	Value
   Workspace Key	Enter the project_id
   Service Account Email	Enter the client_email
   Private Key	Enter the private_key

   Enter from -----BEGIN PRIVATE KEY----- to -----END PRIVATE KEY-----. (The leading " and trailing \n", are not needed.)
   If an error appears, refer to the following help article. “This app isn’t verified by Google” appears
   
3. When the integration succeeds, registered user information will appear in the account list. If the process does not complete successfully, click Edit from the Status tab on the integrations screen and try again. If the issue persists, please contact us via chat.