
Is used only by people in your Google Workspace or Cloud Identity organization.Is in development, testing,or staging and not production.However we recommend initiating the process well before you reach 100 users to ensure all users are able to access the integration.Īdditional exemptions apply if your application: If your application has fewer than 100 users, you will not need to undergo app verification until that threshold is hit. Sensitive scopes include, but are not limited to: If your app only uses “sensitive scopes” (as defined by Google - essentially, any data that is not a restricted scope is considered a sensitive scope), you’ll need to undergo app verification only (no security assessment needed). Currently, Google lists restricted scopes as: If your app uses “restricted scopes”, you’ll need to undergo app verification and a security assessment. If your app uses “sensitive scopes” it’s considered a best practice to undergo app verification. How Do I Know if I Need to Submit My App For Verification?įor third-party applications that access certain types of Google user data ( Sensitive and Restricted Scopes) it’s recommended and sometimes required to undergo app verification. Today, we have much more detailed information about Google’s OAuth updates – everything from the third-party app verification process to the security assessment, costs, and timelines.

When Google announced they were making sweeping changes to the way third-party apps can access Google user data, Google users and security proponents celebrated the enhanced security measures that protect user data - but developers were initially left with little detail about how to continue providing their services to Gmail users in compliance with the new regulations. Here, we’ve distilled the details for you.

First, let’s just clear the air: the details of the Google OAuth requirements can feel a little dry and confusing at times, but getting into the weeds is incredibly useful for anyone building products that access Google user data.
