Setting up OAuth IMAP Google

Google only accepts public AND secure (https) URLs. If your GLPI URL is not accessible from the internet, this procedure will not apply.

Install the OAuth IMAP application

• From Setup > Plugins, install Oauth imap.

Install OAuth IMAP

---

Creating a project

• From your Google console (administrator access is required), go to your organisation then new project

New project creation

• Enter the name of your project

• Click on Create

Validation of new project

• Return to your organisation,

• Select your project

Select the new project

---

Setting up Oauth access

• From the menu, click on APIs & Services.

• Then OAuth consent screen

Oauth consent screen

Application Information

• From the preview, click Get started

• Enter the application name and the user support email (users will be able to contact you with questions regarding their consent)

Application information

Audience

• Indicate what type of audience will be able to use this application (here internal because the user who will be using the imap services is a user of the organization)

Audience settings

Contact information

• Enter the contact name (this contact is notified of changes made to the application)

Contact information

---

Google API Services User Data Policy

• Accept the Google API Services User Data Policy and click Continue and Create

Application finalization

---

Creating a Client

Application Type

You now need to create an application client that will connect Google to your GLPI instance using an application ID and a client secret.

• In the Clients tab, click Create a client.

• Select Web Application as the application type.

• Enter a name for your application.

Added the web application

Authorised redirect URIs

The return URL must be specified in this section. This URL is found in GLPI under Setup > OAuth IMAP > + Add

Retrieving the callback URL

• Enter this URL in the Authorised redirect URIs section of your application.

Inserting the return URL

• Click Create to validate your application

---

Application information

In the next step, the client secret will be displayed. Once you leave this screen, it will no longer be available. Remember to save it in a safe place.

The application is now created. The screen displays the application ID and the client secret, which you will need to enter in GLPI.

Information entered in GLPI

---

Finalizing GLPI configuration

Once your application information is listed in GLPI, and your application is active, you can click on + Add

OAuth IMAP application created

OAuth Authorization

OAuth authorization is required for GLPI to use the IMAP services for the mailbox in question.

• From the OAuth Authorization tab, click + Create authorization.

• Specify the account authorized to use the IMAP services.

OAuth Authorization

---

Receiver configuration

• From Configuration > Receivers > + Add

• Specify the server imap.google.com

• In Connection options, select the previously created IMAP OAuth application

• In Username, select the user with OAuth permissions

Receiver configuration

---

More information

For more information on receivers configuration, please refer to the following article:

Receivers configuration