Connect Adobe Workfront Fusion to Google Services with updated security measures

Access requirements

You must have the following access to use the functionality in this article:

Adobe Workfront plan*

Pro or higher

Adobe Workfront license*

Plan, Work

Adobe Workfront Fusion license**

Workfront Fusion for Work Automation and Integration

Product Your organization must purchase Adobe Workfront Fusion as well as Adobe Workfront to use functionality described in this article.

To find out what plan, license type, or access you have, contact your Workfront administrator.

For information on Adobe Workfront Fusion licenses, see Adobe Workfront Fusion licenses.

Google Services restrictions

Google introduced restrictions on how users can use their API as of June 1st, 2020. These security measures protect Google users from leakage or misuse of their personal data on Google. The restrictions are related to the Gmail and Google Drive apps. For more information about these restrictions, see “Additional Requirements for Specific API Scopes” in the Google API Services User Data Policy

To access restricted scopes, the connected service (Adobe Workfront Fusion or any other service that wants to access the user’s data via the API) must be verified and must have a Letter of Assessment to prove that the service is secure and transparent about how they use the data. Workfront Fusion complies with all of Google’s requirements for access to restricted scopes. However, most of the third-party connected services in Workfront Fusion don’t have the Letter of Assessment, and therefore don’t comply with Google terms. Because of that, Workfront Fusion is not permitted to send data to these services.

Exceptions to Google Services restrictions

There are a few exceptions that make it possible to send data to an unapproved third-party service that doesn’t have the Letter of Assessment without violating any of the new restrictions. They differ based on G Suite with the Workfront Fusion OAuth client, G Suite with another OAuth client, or and

G suite with Workfront Fusion OAuth client

Workfront Fusion uses the Domain-wide Installation exception. Domain-wide Installation is suited for G Suite users, and allows users to integrate unapproved services without any limitations. If you are a G Suite user, you don’t have to perform any additional steps and can directly connect to unapproved services.

G suite with another OAuth client

G Suite users that prefer to use their own OAuth client instead of using the Workfront Fusion OAuth client can connect to Google Services through the Internal Use approach. This option is intended for advanced users. For instructions, see Connect Adobe Workfront Fusion to Google Services using a custom OAuth client. and

User that access Google Services through or can connect to Google Services through the Personal Use approach. This option is intended for advanced users. For instructions, see Connect Adobe Workfront Fusion to Google Services using a custom OAuth client.


What apps in Adobe Workfront Fusion are affected?

Google Drive, Gmail, and Email (connected to Gmail account).

Do I have a G Suite account?

If your email address ends with or your account is not a G Suite account. If your Google account ends with custom domain such as then it is a G Suite account.

What should I do if I’m or user?

These new restrictions only apply if you are integrating Google Drive or Gmail. If you want to connect to Google Drive or Gmail, you can

If you want to integrate any other service than Google Drive or Gmail, these restrictions do not apply.

For instructions about connecting other Google Services to Workfront Fusion, see Connect the module’s app or web service to Workfront Fusion in the article Create a scenario in Adobe Workfront Fusion.

What should I do if I’m a G Suite user?

There is no required action.

On this page