On this page
You can authenticate with Google to create your own instance of the Google Suite connector through the UI or through APIs. Once authenticated, you can use the connector instance to access the different functionality offered by the Google platform.
Authenticate Through the UI
Use the UI to authenticate with Google and create a connector instance. Because you authenticate with Google via OAuth 2.0, all you need to do is add a name for the instance. After you create the instance, you'll log in to Google to authorize SAP Open Connectors access to your account. For more information about authenticating a connector instance, see Authenticate a Connector Instance (UI).
After successfully authenticating, we give you several options for next steps. Make requests using the API docs associated with the instance, map the instance to a common resource, or use it in a formula template.
Authenticate Through API
Authenticating through API is similar to authenticating via the UI. Instead of clicking and typing through a series of buttons, text boxes, and menus, you will instead send a request to our instance
endpoint. The end result is the same, though: an authenticated connector instance with a token and id.
Authenticating through API follows a multi-step OAuth 2.0 process that involves:
- Getting a redirect URL. This URL sends users to the vendor to log in to their account.
- Authenticating users and receiving the authorization grant code. After the user logs in, the vendor makes a callback to the specified url with an authorization grant code.
- Authenticating the connector instance. Using the authorization code from the vendor, authenticate with the vendor to create a connector instance at SAP Open Connectors.
Getting a Redirect URL
Use the following API call to request a redirect URL where the user can authenticate with the service provider. Replace {keyOrId}
with the connector key, googlesuite
.
curl -X GET /elements/{keyOrId}/oauth/url?apiKey=<api_key>&apiSecret=<api_secret>&callbackUrl=<url>&siteAddress=<url>
Query Parameters
Query Parameter | Description |
---|---|
apiKey | The API key or client ID obtained from registering your app with the provider. This is the Client ID that you recorded in API Provider Setup. |
apiSecret | The client secret obtained from registering your app with the API provider. This is the Client secret that you recorded in API Provider Setup. |
callbackUrl | The URL that the API provider returns a user to after they authorize access. This is the Authorized redirect URI that you recorded in API Provider Setup. |
Example cURL
curl -X GET \
'https://api.openconnectors.us2.ext.hana.ondemand.com/elements/api-v2/elements/googlesuite/oauth/url?apiKey=Rand0MAP1-key&apiSecret=fak3AP1-s3Cr3t&callbackUrl=https:%3A%2F%2Fwww.mycoolapp.com%2auth' \
Example Response
Use the oauthUrl
in the response to allow users to authenticate with the vendor.
{
"oauthUrl": "https://accounts.google.com/o/oauth2/v2/auth?access_type=offline&prompt=consent&scope=profile+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fgmail.settings.basic+https%3A%2F%2Fmail.google.com%2F+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcontacts+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcalendar+&response_type=code&redirect_uri=https%3A%2F%2F2Fwww.mycoolapp.com%2Fget&state=googlesuite&client_id=Rand0MAP1-key",
"element": "googlesuite"
}
Authenticating Users and Receiving the Authorization Grant Code
Provide the oauthUrl
in the response from the previous step to the users. After users authenticate, Google provides the following information in the response:
- code
- state
Response Parameter | Description |
---|---|
code | The authorization grant code returned from the API provider in an OAuth 2.0 authentication workflow. SAP Open Connectors uses the code to retrieve the OAuth access and refresh tokens from the endpoint. |
state | A customizable identifier, typically the connector key (googlesuite ) . |
error
instead of the code
parameter. In this case, your application can handle the error gracefully.Authenticating the Connector Instance
Use the code
from the previous step and the /instances
endpoint to authenticate with Google and create a connector instance. If you are configuring events, see the Events section.
To authenticate a connector instance:
Construct a JSON body as shown below (see Parameters):
{ "element": { "key": "googlesuite" }, "providerData": { "code": "<AUTHORIZATION_GRANT_CODE>" }, "configuration": { "oauth.api.key": "<Google app Client ID>", "oauth.api.secret": "<Google app Client secret>", "oauth.callback.url": "<Google app Authorized redirect URI >" }, "tags": [ "<Add_Your_Tag>" ], "name": "<INSTANCE_NAME>" }
Call the following, including the JSON body you constructed in the previous step:
POST /instances
Note: Make sure that you include the User and Organization keys in the header. For more information, see Authorization Headers, Organization Secret, and User Secret.Locate the
token
andid
in the response and save them for all future requests using the connector instance.
Example cURL
curl -X POST \
https://api.openconnectors.us2.ext.hana.ondemand.com/elements/api-v2/instances \
-H 'authorization: User <USER_SECRET>, Organization <ORGANIZATION_SECRET>' \
-H 'content-type: application/json' \
-d '{
"element": {
"key": "googlesuite"
},
"providerData": {
"code": "xxxxxxxxxxxxxxxxxxxxxxx"
},
"configuration": {
"oauth.callback.url": "https;//mycoolapp.com",
"oauth.api.key": "xxxxxxxxxxxxxxxxxx",
"oauth.api.secret": "xxxxxxxxxxxxxxxxxxxxxxxx"
},
"tags": [
"Docs"
],
"name": "API Instance"
}'
Parameters
API parameters not shown in SAP Open Connectors are in code formatting
.
Parameter | Description | Data Type |
---|---|---|
key | The connector key. googlesuite | string |
code | The authorization grant code returned from the API provider in an OAuth 2.0 authentication workflow. SAP Open Connectors uses the code to retrieve the OAuth access and refresh tokens from the endpoint. | string |
Namename | The name of the connector instance created during authentication. | string |
oauth.api.key | The API key or client ID obtained from registering your app with the provider. This is the Client ID that you noted in API Provider Setup. | string |
oauth.api.secret | The client secret obtained from registering your app with the API provider. This is the Client secret that you noted in API Provider Setup. | string |
oauth.callback.url | The API key or client ID obtained from registering your app with the provider. This is the Authorized redirect URI that you noted in API Provider Setup. | |
tags | Optional. User-defined tags to further identify the instance. | string |
Example Response for an Authenticated Connector Instance
In this example, the instance ID is 12345
and the instance token starts with "ABC/D...". The actual values returned to you will be unique: make sure you save them for future requests to this new instance.
{
"id": 12345,
"name": "API Instance",
"createdDate": "2018-01-22T20:55:08Z",
"token": "ABC/Dxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"element": {
"id": 9386,
"name": "Google Suite",
"hookName": "",
"key": "googlesuite",
"description": "Add a Google Suite Instance to connect your existing Google account to the general Hub, allowing you to manage your gmails , peoples, contacts, calendars and events across multiple general Connectors.You will need your Google account information to add an instance ",
"image": "elements/googlesuite-logo.png",
"active": true,
"deleted": false,
"typeOauth": false,
"trialAccount": false,
"resources": [ ],
"transformationsEnabled": true,
"bulkDownloadEnabled": false,
"bulkUploadEnabled": false,
"cloneable": true,
"extendable": false,
"beta": false,
"authentication": {
"type": "oauth2"
},
"extended": false,
"hub": "general",
"protocolType": "http",
"parameters": [],
"private": false
},
"elementId": 8153,
"tags": [
"Docs"
],
"provisionInteractions": [ ],
"valid": true,
"disabled": false,
"maxCacheSize": 0,
"cacheTimeToLive": 0,
"providerData": {
"code": "4/T6i0VObdJU8_reE0xQ90cGJJNTPW8MS-Ri_7G_x3FIQ"
},
"configuration": { },
"eventsEnabled": false,
"eventsNotificationCallbackUrl": "false",
"traceLoggingEnabled": false,
"cachingEnabled": false,
"externalAuthentication": "none",
"user": {
"id": 3306,
"emailAddress": "claude.elements@cloud-elements.com",
"firstName": "Claude",
"lastName": "Elements"
}
}