Skip to content

Set Up OAuth 2.0 for the Google Cloud Storage Destination

The following article shows how to enable OAuth 2.0 for the google cloud storage destination.

Xtract Universal supports OAuth 2.0 for authentication with the Google servers. To enable the OAuth 2.0 protocol, configure an OAuth flow with the required access permissions to Xtract Universal.

Note

Google initially classifies third-party applications generally as unsafe and issues a warning. The verification process is optional. Official app verification involves ongoing charges.

Note

As of version 5.11.16 Xtract Universal also supports authentication via service account credentials, see Documentation: Google Cloud Storage - Destination Details.

GCP console

The GCP console allows configuring of all resources and services. To get to the overview dashboard, navigate to the Google Cloud Storage page and click [Console] or [Go to console].

To access all settings and services use the navigation menu on the upper left side.

xu-google-cloud-req-01

Set Up OAuth 2.0

  1. Open the GCP console. In the navigation menu, select APIs & Services > Credentials.
    xu-google-cloud-req-02
  2. In the "Credentials" section select Create Credentials > OAuth client ID.
    xu-google-cloud-req-03
  3. Click [Configure consent screen]. The "Configure consent screen" is processed with the OAuth flow that is started when a connection is established in the Xtract Universal Designer.
    xu-google-cloud-req-04
    1. If your account belongs to an organization, you can restrict the usage of Xtract Universal in combination with GCS to your organization. To do so, select internal in the User Type option . The restriction option is only available, if you are a GSuite user.
    2. Alternatively you can allow any user with access to the OAuth credentials to grant Xtract Universal the permission to write data to your GCS buckets. To do so, select external in the User Type option.
      xu-google-cloud-req-05
  5. Click [Create] to continue .
  6. In the "App information" section enter an app name of your choice.
    Support email and Developer contact information are also mandatory fields. Click [Save and continue] to get to the next section.
    xu-google-cloud-req-06
  7. In the following section click [Add or remove scopes].
    Xtract Universal needs read and write permissions for its operations, which are configured in the "Scopes" section.
    xu-google-cloud-req-08
  8. Enter https://www.googleapis.com/auth/devstorage.read_write under Manually add scopes and click [Add to table].
    xu-google-cloud-req-09
  9. The newly added scope is the first entry in the table. Click [Update] to create the entry.
    xu-google-cloud-req-10
  10. Click [Continue] when the "Verfification required" window is prompted.
    xu-google-cloud-req-11
  11. Click [Save and continue] twice.

    xu-google-cloud-req-12
  12. Click [Back to dashboard] to return to the dashboard.
    xu-google-cloud-req-14
  13. Return to the "Credentials" menu, click [Create credentials] and select OAuth client ID.
    Select Desktop app as application type , enter a name for the app .
    xu-google-cloud-req-15
  14. Click [Create] .

Your OAuth client is now created.
The Client ID and the Client secret are needed for the destination configuration in Xtract Universal, see Documentation: Google Cloud Connection Settings.
xu-google-cloud-req-16

Last update: October 20, 2024