Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Create API Client in G Suite

Limited Availability: Skyhigh CASB for Google Chat is a Limited Availability feature. To enable API access for your Google Chat instance, contact Skyhigh Support

IMPORTANT: To integrate Skyhigh CASB with Google Chat, G Suite users must create a new API client with the specified scopes.

Authorize Skyhigh CASB

To give Skyhigh CASB access to your Google Chat account, follow the steps below:

  1. In the G Suite admin console, go to Security > Access and data control > API controls.
  2. On the Domain wide delegation section, click MANAGE DOMAIN WIDE DELEGATION.

    ManageDomain_WideDelegation.png
  3. On the Domain-wide Delegation page, click Add new to create a new API client.

    ClientID_Scopes_AddNewClientID.png
     
  4. On the Add a new Client ID dialog, enter Client ID, OAuth scopes (comma-delimited), and then click AUTHORIZE.

    Add_New_Client_ID.png
  • Client ID. Add the following Client ID based on your environment:
    1. Skyhigh CASB production environment (https://www.myshn.net):

      110897827657523176640
    2. Skyhigh CASB EU/Germany/Frankfurt environment (https://www.myshn.eu):

      110897827657523176640
    3. Skyhigh CASB GovCloud/FEDRAMP environment:

      110897827657523176640
  • OAuth scopes (comma-delimited). Copy and paste the following API scopes:

https://www.googleapis.com/auth/userinfo.email,
https://www.googleapis.com/auth/userinfo.profile,
https://www.googleapis.com/auth/admin.directory.user.readonly,
https://www.googleapis.com/auth/chat.memberships,
https://www.googleapis.com/auth/chat.spaces,
https://www.googleapis.com/auth/chat.messages,
https://www.googleapis.com/auth/chat.delete,
https://www.googleapis.com/auth/admin.reports.audit.readonly,
https://www.googleapis.com/auth/admin.reports.usage.readonly

You can see the newly added API client on the Security > Access and data control > API controls > Domain-wide Delegation page.

ClientID_Scopes_listed.png

  • Was this article helpful?