Skip to main content
Biamp Cornerstone

Booking System Preparation: Google Workspace

This article explains how to register the Evoko Home app in Google Workspace (formerly G Suite). You must be a Google Domain Admin to complete this process.

  • It may take up to 24 hours for this information to populate in Google Workspace before it can be connected to Evoko Home.

Note: During this process, you will generate several tokens in the Google Cloud Platform. As you complete these steps, make sure to record the following values, as they will be used later during the setup:

  • Evoko Home Admin Email

  • Service Account Email Address

  • Service Account Unique ID

  • P12 Key (.p12 file)

 

 

Create a new project and enable APIs

In this section, you will create a new Google Cloud project and add the necessary APIs.

  1. Log into the Google Cloud Platform with your Google account.

  2. Click Create Project.

  3. Enter a name for the Evoko configuration project and click Create.

  4. Click the ≡ Navigation Menu, then navigate to APIs & Services, then Enabled APIs & Services.

  5. Click on + Enable APIs and Services.

  6. In the API Library, search for Google Calendar API. Click Google Calendar API.

  7. On the Google Calendar API page, click Enable.

  8. Repeat the previous steps to add the Gmail API.

  9. Repeat the previous steps to add the Admin SDK API.

 

 

Create a Service Account

In this section, you will create the Service Account for Evoko Home and the P12 key in the Google Cloud Platform.

  1. Click the ≡ Navigation Menu, then navigate to IAM & Admin, then Service Accounts.

  2. Click + Create Service Account.

  3. Enter a name and ID for the Evoko Home Service Account, then click Create and Continue.

  4. In the Select A Role dropdown menu, select Service Accounts, then Service Account Token Creator. Click Done.

  5. Next to the newly-created service account, click the ⋮ Actions Menu, then Manage Details.

  6. In the Details tab, make note of the Service Account Email Address and Service Account Unique ID.

  7. Click Keys, then Add Key. Choose P12 as the Key Type. Click Create.

  8. Save the P12 Key.

 

 

Grant user APIs

In this section, you designate a user in your organization as an Evoko Home Admin Email. This user will be authenticated when connecting Evoko Home to Google Workspace and will act as the Global Admin in the Evoko Home interface. API permissions are only needed for this user.

  1. Log into the Google Admin Console with your Google account.

  2. Click the ≡ Navigation Menu, then navigate to Directory, then Users.

  3. Click on the user that you want to assign as the Admin Email.

  4. Under Admin Roles and Privileges, click Assign Roles.

  5. Apply the necessary API permissions by selecting the Groups Admin role, then click Save.

 

 

Add API permissions to app

In this section, you grant API access permissions to the Service Account in the Google Admin Console.

  1. Click the ≡ Navigation Menu, then navigate to Security, then Access and Data Control, then API Controls.

  2. On the API Controls page, click Manage Domain Wide Delegation.

  3. Click Add A New Client. Enter the Service Account Unique ID gathered in the previous section.

  4. Enter the following OAuth scopes as a single comma-delimited line:

https://www.googleapis.com/auth/admin.directory.user.readonly,
https://www.googleapis.com/auth/calendar,
https://www.googleapis.com/auth/gmail.send

  1. Click Authorize. Under View Details, you should see all 3 scopes applied.

 

 

Create and configure resource calendars

In this section, you configure global resource sharing and create a new resource in the Google Admin Console.

  1. Click the ≡ Navigation Menu, then navigate to Apps, then Google Workspace, then Calendar.

  2. Click External Sharing Options For Primary Calendars.

  3. Set the External Sharing Options to "Only free/busy information (hide event details)" and click Save.

  4. Navigate to Directory, then Buildings and Resources, then Manage Resources.

  5. Click + Create A New Resource.

  6. Enter the details for your resource and click Add Resource.

  7. In an Incognito/Private window, log into calendar.google.com with the Evoko Home Admin Email.

  8. In the Calendar sidebar, next to Other Calendars, click + Add, then click Browse Resources.

  9. On the Resources page, click the ☑ Check Box next to the newly-created resource.

  10. In the sidebar, navigate to the newly-created resource, click the ˅ Menu, then Share With Specific People.

  11. Add the previously-created Service Account Email Address. Set the Permissions to "See only free/busy (hide details)"  and click Send.

  12. Add the Evoko Home Admin Email account as well, with the Permissions "Make changes to events" and click Send.

  13. If you will require RFID or PIN authentication for booking, add the users that will book with this authentication as well, with the Permissions "Make changes to events" and click Send.

 

 

  • Was this article helpful?