> ## Documentation Index
> Fetch the complete documentation index at: https://hc.saas-manager.biz.nuro.jp/llms.txt
> Use this file to discover all available pages before exploring further.

# Google Cloud Platform

> Steps to integrate with Google Cloud Platform. This guide covers everything from logging in as an administrator to completing the integration with MoneyForward Admina.

## Supported Features

<Badge color="blue">Account Deletion</Badge> <Badge color="blue">Account Provisioning</Badge>

## Integration Overview

There are two integration methods for Google Cloud Platform: OAuth and API Key. Review the features below and choose the method that best fits your management needs.

| Available Actions / Integration Method | OAuth (New)           | API (Old)             |
| -------------------------------------- | --------------------- | --------------------- |
| **Integration unit**                   | All projects in bulk  | Per project           |
| **Administrator**                      | Account administrator | Project administrator |
| **Supported actions**                  | User sync, deletion   | User sync only        |

## OAuth Integration (New: Recommended)

### Prerequisites

#### Logging In to Google Cloud Platform

Go to the [Google Cloud Platform login page](https://accounts.google.com/signin/v2/identifier?service=cloudconsole\&passive=1209600\&osid=1\&continue=https%3A%2F%2Fconsole.cloud.google.com%2F%3Fhl%3Dja%26pli%3D1\&followup=https%3A%2F%2Fconsole.cloud.google.com%2F%3Fhl%3Dja%26pli%3D1\&hl=ja\&flowName=GlifWebSignIn\&flowEntry=ServiceLogin) and enter the email address and password of an administrator account.

#### Enabling the Cloud Resource Manager API

1. After logging in to Google Cloud Platform, create a project or navigate to the **project you want to integrate**.
2. Go to **APIs & Services** > **Enabled APIs & Services** and click **Enable APIs and Services**.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1677584198042-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=21e4be9af038e44fb3965e6e52083138" alt="APIs & Services screen" width="3028" height="1314" data-path="images/integrations/n0b51m6id9/1677584198042-image.png" />

3. Search for **Cloud Resource Manager API** and click **Enable**.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1677584311961-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=16606e0ba77709659b60c7e7ff513cbd" alt="Cloud Resource Manager API search" width="2970" height="1082" data-path="images/integrations/n0b51m6id9/1677584311961-image.png" />

#### Creating an OAuth Application for Integration

4. After logging in to Google Cloud Platform, go to **APIs & Services > OAuth consent screen**.
5. Select `Internal` for the User Type and click **Create**.
   If you see "Error 403: org\_internal" and the integration fails, create with User Type `External`.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1729835644557-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=34edd4e418d204cfba6d4fdfdf2ae3d1" alt="OAuth consent screen" width="1059" height="597" data-path="images/integrations/n0b51m6id9/1729835644557-image.png" />

6. Enter the application name (e.g., Admina), user support email, and developer contact email in the app information, then click **Save and Continue**.
7. Click **Add or Remove Scopes** and add one of the following Scope URLs. The image shows an example scope configuration for Read & Write.

* **Read & Write** (to allow user sync and deletion): `https://www.googleapis.com/auth/cloud-platform`
* **Read Only** (to allow user sync only): `https://www.googleapis.com/auth/cloud-platform.read-only`

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1729836159689-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=3060037f40116c9ac4ecd22bbe0a3c4f" alt="Scope configuration" width="1920" height="328" data-path="images/integrations/n0b51m6id9/1729836159689-image.png" />

After adding the scope, click **Back to Dashboard**.

8. Click the **Credentials** menu, then click **+ Create Credentials > OAuth client ID**.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1729836864879-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=122725197af42787d6c101625503c680" alt="Create credentials" width="2062" height="1038" data-path="images/integrations/n0b51m6id9/1729836864879-image.png" />

9. Fill in the OAuth client ID creation form as follows and click **Create**.

* **Application type**: `Web application`
* **Name**: Any name (e.g., Admina)
* **Authorized redirect URIs**: `https://itmc.i.moneyforward.com/oauth/callback`

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1729837579213-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=5809ba1f599ddb3d198f0262fa3e57a1" alt="Create OAuth client ID" width="1958" height="1656" data-path="images/integrations/n0b51m6id9/1729837579213-image.png" />

10. Copy the displayed Client ID and Client Secret values.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1729837670168-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=9da5be061b10d0187028994c02968329" alt="Client ID confirmation" width="1184" height="1168" data-path="images/integrations/n0b51m6id9/1729837670168-image.png" />

### Integration Setup

1. In the MoneyForward Admina integrations screen, search for **Google Cloud Platform**. Select the OAuth tab.
2. Enter the Client ID and Client Secret, then click **Connect**. For Permissions, select the option that matches the scope configured in step 7.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1729837759685-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=18c55090976bf3ee63d1635aed8a27a6" alt="OAuth integration settings" width="1046" height="1488" data-path="images/integrations/n0b51m6id9/1729837759685-image.png" />

When the integration succeeds, registered user information will appear in the account list.

If the process does not complete successfully, click **Edit** from the Status tab on the integrations screen and try connecting again.

If the issue persists, please contact us via chat.

For an overview of the Google Cloud Platform integration, visit the [integration page](http://admina.moneyforward.com/en/integrations/google-cloud-platform).

## API Key Integration (Old)

### Prerequisites

#### Logging In to Google Cloud Platform

Go to the [Google Cloud Platform login page](https://accounts.google.com/signin/v2/identifier?service=cloudconsole\&passive=1209600\&osid=1\&continue=https%3A%2F%2Fconsole.cloud.google.com%2F%3Fhl%3Dja%26pli%3D1\&followup=https%3A%2F%2Fconsole.cloud.google.com%2F%3Fhl%3Dja%26pli%3D1\&hl=ja\&flowName=GlifWebSignIn\&flowEntry=ServiceLogin) and enter the email address and password of an administrator account.

#### Enabling the Cloud Resource Manager API

1. After logging in to Google Cloud Platform, navigate to the **project you want to integrate**.

<Info>
  Integration is performed on a per-project basis. Select the project whose users you want to retrieve, then complete the integration. You can integrate multiple projects by repeating this process.
</Info>

2. Go to **APIs & Services** > **Enabled APIs & Services** and click **Enable APIs and Services**.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1677584198042-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=21e4be9af038e44fb3965e6e52083138" alt="APIs & Services screen" width="3028" height="1314" data-path="images/integrations/n0b51m6id9/1677584198042-image.png" />

3. Search for **Cloud Resource Manager API** and click **Enable**.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1677584311961-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=16606e0ba77709659b60c7e7ff513cbd" alt="Cloud Resource Manager API search" width="2970" height="1082" data-path="images/integrations/n0b51m6id9/1677584311961-image.png" />

#### Creating a Service Account for Integration

4. Go to **APIs & Services > Credentials**, click **\[CREATE CREDENTIALS]**, and select **\[Service account]**.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1677585452479-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=8b3b9e1d5ebf50c81c7ecaaf88da6639" alt="Credentials screen" width="3050" height="1458" data-path="images/integrations/n0b51m6id9/1677585452479-image.png" />

5. Enter any name in the Service Account Name field and click **\[CREATE AND CONTINUE]**.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1677586647991-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=1c7f2702aecd0bf0a578469c141d3aba" alt="Create service account" width="1640" height="1644" data-path="images/integrations/n0b51m6id9/1677586647991-image.png" />

6. Configure the role. Select **Security Reviewer** and click **Continue**. Finally, click **Done**.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1677587749268-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=1d9281d9fcf3b828e31bfd6f68c3275e" alt="Role configuration" width="1560" height="1632" data-path="images/integrations/n0b51m6id9/1677587749268-image.png" />

#### Creating a Private Key

7. From Service Accounts, click the service account name you created, then go to the **\[KEYS]** tab > **ADD KEY** > **Create new key**.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1677588041192-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=2aa80bb4a6ead96f620fbaa6f31a2455" alt="KEYS tab" width="2188" height="966" data-path="images/integrations/n0b51m6id9/1677588041192-image.png" />

8. Select **JSON** as the Key type and click **CREATE**.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1677588161134-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=17f9a02903f6c3ce7994728731ec3ba4" alt="Create JSON key" width="1048" height="642" data-path="images/integrations/n0b51m6id9/1677588161134-image.png" />

9. A JSON file will be downloaded — save it. Open it with a text editor to review the contents. **All parameters required for the integration are included in this JSON file.**

Prerequisites are now complete.

### Integration Setup

1. In the MoneyForward Admina integrations screen, search for **Google Cloud Platform**. Switch to the **API** tab.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1729836471408-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=c3acc92046ec8f1d0c8856dde6fe8d65" alt="Select API tab" width="488" height="725" data-path="images/integrations/n0b51m6id9/1729836471408-image.png" />

2. Enter the following values from the downloaded JSON file and click **Connect**.

<img src="https://mintcdn.com/admina-sbn/ZShCZj3AVDsgaly8/images/integrations/n0b51m6id9/1678093554971-image.png?fit=max&auto=format&n=ZShCZj3AVDsgaly8&q=85&s=40ac51f6427505900c313b67c1f56514" alt="API integration settings input screen" width="1978" height="826" data-path="images/integrations/n0b51m6id9/1678093554971-image.png" />

* **Workspace Key:** Enter the `project_id`
* **Service Account Email:** Enter the `client_email`
* **Private Key:** Enter the `private_key`.
  Enter from **-----BEGIN PRIVATE KEY-----** to **-----END PRIVATE KEY-----**. (The leading `"` and trailing `\n",` are not needed.)

<Info>
  If an error appears, refer to the following help article.
</Info>

["This app isn't verified" error from Google](/en/it-management/faq/dqpoevdgwg-google-error)
"This app isn't verified by Google" error

When the integration succeeds, registered user information will appear in the account list.

If the process does not complete successfully, click **Edit** from the Status tab on the integrations screen and try connecting again.

If the issue persists, please contact us via chat.

For an overview of the Google Cloud Platform integration, visit the [integration page](http://admina.moneyforward.com/en/integrations/google-cloud-platform).
