Connect Gmail to Juniper using Google OAuth

Juniper is compatible with Google’s OAuth for Gmail. In order to send secure emails from a custom domain, all that is required is to configure a few settings on Google’s Workspace platform, as well as on the back end of the Juniper database. This configuration works by using either a personal email address or an address created by a custom domain.

Tip

For more information, visit Google’s documentation on setting up OAuth.

See also

• Google Sign-In Authentication

• Synchronize Google calendar with Juniper

Setup in Google

Create a new project

To get started, go to the Google API Console. Log in with your Google Workspace account if you have one, otherwise log in with your personal Gmail account (this should match the email address you want to configure in Juniper).

After that, click on Create Project, located on the far right of the OAuth consent screen. If a project has already been created in this account, then the New Project option will be located on the top right under the Select a project drop-down menu.

On the New Project screen, rename the Project name to Juniper and browse for the Location. Set the Location as the Google Workspace organization. If you are using a personal Gmail account, then leave the Location as No Organization.

Click on Create to finish this step.

OAuth consent screen

If the page doesn’t redirect to the User Type options, click on OAuth consent screen in the left menu.

Under User Type options, select the appropriate User Type, and then click on Create again, which will finally navigate to the Edit app registration page.

Warning

Personal Gmail Accounts are only allowed to be External User Type, which means Google may require an approval, or for Scopes to be added on. However, using a Google WorkSpace account allows for Internal User Type to be used.

Note, as well, that while the API connection is in the External testing mode, then no approval is necessary from Google. User limits in this testing mode is set to 100 users.

Edit app registration

Next we will configure the app registration of the project.

On the OAuth consent screen step, under the App information section, enter Juniper in the App name field. Select the organization’s email address under the User support email field.

Next, under App Domain ‣ Authorized domains, click on Add Domain and enter Juniper.com.

After that, under the Developer contact information section, enter the organization’s email address. Google uses this email address to notify the organization about any changes to your project.

Next, click on the Save and Continue button. Then, skip the Scopes page by scrolling to the bottom and clicking on Save and Continue.

If continuing in testing mode (External), add the email addresses being configured under the Test users step, by clicking on Add Users, and then the Save and Continue button. A summary of the app registration appears.

Finally, scroll to the bottom and click on Back to Dashboard to finish setting up the project.

Create Credentials

Now that the project is set up, credentials should be created, which includes the Client ID and Client Secret. First, click on Credentials in the left sidebar menu.

Then, click on Create Credentials in the top menu and select OAuth client ID from the dropdown menu.

• Under Application Type, select Web Application from the dropdown menu.

• In the Name field, enter Juniper.

• Under the Authorized redirect URIs label, click the button ADD URI, and then input https://yourdbname.Juniper.com/google_gmail/confirm in the URIs 1 field. Be sure to replace the yourdbname part of the URL with the actual Juniper database name.

• Next, click on Create to generate an OAuth Client ID and Client Secret. Finally, copy each generated value for later use when configuring in Juniper, and then navigate to the Juniper database.

Setup in Juniper

Enter Google Credentials

First, open Juniper and navigate to the Apps module. Then, remove the Apps filter from the search bar and type in Google. Install the module called Google Gmail.

Next, navigate to Settings ‣ General Settings, and under the Discuss section, ensure that the checkbox for Custom Email Servers or External Email Servers is checked. This populates a new option for Gmail Credentials or Use a Gmail Sever. Then, copy and paste the respective values into the Client ID and Client Secret fields and Save the settings.

Configure outgoing email server

To configure the external Gmail account, return to the top of the Custom Email Servers setting and then click the Outgoing Email Servers link.

Then, click on New or Create to create a new email server, and fill in the Name, Description, and the email Username (if required).

Next, click on Gmail OAuth Authentication or Gmail (under the Authenticate with or Connection section). Finally, click on Connect your Gmail Account.

A new window labeled Google opens to complete the authorization process. Select the appropriate email address that is being configured in Juniper.

If the email address is a personal account, then an extra step pops up, so click Continue to allow the verification and connect the Gmail account to Juniper.

Then, allow Juniper to access the Google account by clicking on Continue or Allow. After that, the page navigates back to the newly configured outgoing email server in Juniper. The configuration automatically loads the token in Juniper, and a tag stating Gmail Token Valid appears in green.

Finally, Test the Connection. A confirmation message should appear. The Juniper database can now send safe, secure emails through Google using OAuth authentication.

Google OAuth FAQ

Production VS Testing Publishing Status

Choosing Production as the Publishing Status (instead of Testing) will display the following warning message:

To correct this warning, navigate to the Google API Platform. If the Publishing status is In Production, click Back to Testing to correct the issue.

No Test Users Added

If no test users are added to the OAuth consent screen, then a 403 access denied error will populate.

To correct this error, return to the OAuth consent screen under APIs & Services and add test user(s) to the app. Add the email that you are configuring in Juniper.

Gmail Module not updated

If the Google Gmail module in Juniper has not been updated to the latest version, then a Forbidden error message populates.

To correct this error, go to the Apps module and clear out the search terms. Then, search for Gmail or Google and upgrade the Google Gmail module. Finally, click on the three dots on the upper right of the module and select Upgrade.

Application Type

When creating the credentials (OAuth Client ID and Client Secret), if Desktop App is selected for the Application Type, an Authorization Error appears.

To correct this error, delete the credentials already created and create new credentials, selecting Web Application for the Application Type. Then, under Authorized redirect URIs, click ADD URI and type: https://yourdbname.Juniper.com/google_gmail/confirm in the field, being sure to replace yourdbname in the URL with the Juniper database name.