Google Services restrictions
Google introduced restrictions on how users can use their API as of June 1st, 2020. These security measures protect Google users from leakage or misuse of their personal data on Google.
These restrictions are related to the Gmail and Google Drive apps.
For more information about these restrictions, see “Additional Requirements for Specific API Scopes” in the Google API Services User Data Policy
To access restricted scopes, the connected service (Adobe Workfront Fusion or any other service that accesses the user’s data via the API) must be verified, and must have a Letter of Assessment to prove that the service is secure and transparent about how they use the data. Workfront Fusion complies with all of Google’s requirements for access to restricted scopes. However, most of the third-party connected services in Workfront Fusion don’t have the Letter of Assessment, and therefore don’t comply with Google terms. Because of that, Workfront Fusion is not permitted to send data to these services.
Exceptions to Google Services restrictions
There are a few exceptions that make it possible to send data to an unapproved third-party service that doesn’t have the Letter of Assessment without violating any of the new restrictions. They differ based on Google Workspace with the Workfront Fusion OAuth client, Google Workspace with another OAuth client, or @gmail.com and @googlemail.com.
Google Workspace with Workfront Fusion OAuth client
Workfront Fusion uses the Domain-wide Installation exception. Domain-wide Installation is suited for Google Workspace users, and allows users to integrate unapproved services without any limitations. If you are a Google Workspace user, you don’t have to perform any additional steps and can directly connect to unapproved services.
Google Workspace with another OAuth client
Google Workspace users that prefer to use their own OAuth client instead of using the Workfront Fusion OAuth client can connect to Google Services through the Internal Use approach. This option is intended for advanced users. For instructions, see Connect Adobe Workfront Fusion to Google Services using a custom OAuth client.
@gmail.com and @googlemail.com
Users that access Google Services through @gmail.com or @googlemail.com can connect to Google Services through the Personal Use approach. This option is intended for advanced users. For instructions, see Connect Adobe Workfront Fusion to Google Services using a custom OAuth client.
FAQ
What apps in Adobe Workfront Fusion are affected?
Google Drive, Gmail, and Email (connected to Gmail account).