> ## Documentation Index
> Fetch the complete documentation index at: https://hc.saas-manager.biz.nuro.jp/llms.txt
> Use this file to discover all available pages before exploring further.

# Error Displayed During Google OAuth Integration

> Troubleshooting errors that occur when connecting Google-related services

#### **Problem**

The following error may appear when connecting Google-related services.

```
**Error 400: admin_policy_enforced**

Access to account data is restricted
by a policy within your organization.
Contact your administrator at XXX for details.
```

<img src="https://mintcdn.com/admina-sbn/SGaLkLAYjRKTTbC4/images/it-management/x6sms6m4ja/1783673055302-request-b.png?fit=max&auto=format&n=SGaLkLAYjRKTTbC4&q=85&s=7cfadb2de6529d18a58bdc1afe9484e6" alt="Error screen" width="428" height="480" data-path="images/it-management/x6sms6m4ja/1783673055302-request-b.png" />

#### **Possible Causes**

#### **"Block all third-party API access" is turned on**

Go to `Security` > `Data access and control` > `API controls` in the [Google Workspace Admin Console](https://admin.google.com/ac/owl). If **Block all third-party API access** is enabled there, the integration may fail.

<img src="https://mintcdn.com/admina-sbn/LLQ8yW8IwmV6hfAn/images/it-management/x6sms6m4ja/1671700770252-image.png?fit=max&auto=format&n=LLQ8yW8IwmV6hfAn&q=85&s=6029291047d094e8e5b8b93269c4b24b" alt="Admin console setting" width="2994" height="1440" data-path="images/it-management/x6sms6m4ja/1671700770252-image.png" />

#### **API access to Google Workspace Admin Console is set to Restricted**

Go to `Security` > `Data access and control` > `API controls` > `Manage Google services` in the [Google Workspace Admin Console](https://admin.google.com/ac/owl):

[https://admin.google.com/ac/owl/list?tab=services](https://admin.google.com/ac/owl/list?tab=services)

If the access policy for **Google Workspace Admin Console** is set to `Restricted`, the integration may fail.

<img src="https://mintcdn.com/admina-sbn/LLQ8yW8IwmV6hfAn/images/it-management/x6sms6m4ja/1671702585143-image.png?fit=max&auto=format&n=LLQ8yW8IwmV6hfAn&q=85&s=0ec6e21e8d2913ca505699fba2ecc061" alt="Admin console API setting" width="2274" height="1408" data-path="images/it-management/x6sms6m4ja/1671702585143-image.png" />

#### **This service is explicitly blocked**

Open the [Google Workspace Admin Console](https://admin.google.com/ac/owl) and go to `Security` > `Data access and control` > `API controls`. Then select [Manage third-party app access](https://admin.google.com/ac/owl/list?tab=apps) and search for the application below.

If its access status is `Blocked` or `Restricted`, the integration will fail.

```
App ID: 833359967166-qls05tncj19vnh92ovkj7smpt1eqh45j.apps.googleusercontent.com
App name: Money Forward ITMC
Support: it@i.moneyforward.com 
```

<img src="https://mintcdn.com/admina-sbn/LLQ8yW8IwmV6hfAn/images/it-management/x6sms6m4ja/1671702816177-image.png?fit=max&auto=format&n=LLQ8yW8IwmV6hfAn&q=85&s=1c4f3ab3fb1ffbad532a05f07b6768d0" alt="App block setting" width="2946" height="1052" data-path="images/it-management/x6sms6m4ja/1671702816177-image.png" />

#### **Resolution**

Change the status from `Block` to `Allow` for each cause listed above.

If your organization's policy requires you to grant access only to this service, follow these steps.

* Open the [Google Workspace Admin Console](https://admin.google.com/ac/owl). Go to `Security` > `Data access and control` > `API controls` > [Manage third-party app access](https://admin.google.com/ac/owl/list?tab=apps).

<img src="https://mintcdn.com/admina-sbn/LLQ8yW8IwmV6hfAn/images/it-management/x6sms6m4ja/1671703229207-image.png?fit=max&auto=format&n=LLQ8yW8IwmV6hfAn&q=85&s=a4ab1d3f6ebaf6adefd40d9f4009d365" alt="Manage third-party app access" width="2880" height="1292" data-path="images/it-management/x6sms6m4ja/1671703229207-image.png" />

* Select `Add app` > `OAuth App Name or Client ID`.

<img src="https://mintcdn.com/admina-sbn/LLQ8yW8IwmV6hfAn/images/it-management/x6sms6m4ja/1671703378170-image.png?fit=max&auto=format&n=LLQ8yW8IwmV6hfAn&q=85&s=17a630b93479ca88eaf518f7dc1bfcf7" alt="Add app" width="2452" height="1270" data-path="images/it-management/x6sms6m4ja/1671703378170-image.png" />

* Enter the client ID below in the search field and click the search button. Select `Money Forward ITMC`.

<img src="https://mintcdn.com/admina-sbn/LLQ8yW8IwmV6hfAn/images/it-management/x6sms6m4ja/1671703533184-image.png?fit=max&auto=format&n=LLQ8yW8IwmV6hfAn&q=85&s=dff351781e04b9293bde7d7c1bdb5ce9" alt="Search by client ID" width="2914" height="1210" data-path="images/it-management/x6sms6m4ja/1671703533184-image.png" />

Client ID

```
833359967166-qls05tncj19vnh92ovkj7smpt1eqh45j.apps.googleusercontent.com
```

* Select the same client ID.

<img src="https://mintcdn.com/admina-sbn/LLQ8yW8IwmV6hfAn/images/it-management/x6sms6m4ja/1671703623881-image.png?fit=max&auto=format&n=LLQ8yW8IwmV6hfAn&q=85&s=1fd70b2b62821bc2c70c380c2be49a8d" alt="Select client ID" width="2960" height="1276" data-path="images/it-management/x6sms6m4ja/1671703623881-image.png" />

* Set the app access permission to `Trusted: Can access all Google services`, then click `Configure`.

<img src="https://mintcdn.com/admina-sbn/LLQ8yW8IwmV6hfAn/images/it-management/x6sms6m4ja/1671703717460-image.png?fit=max&auto=format&n=LLQ8yW8IwmV6hfAn&q=85&s=5f9c2670959bc68014934780b08975f6" alt="Access permission setting" width="2848" height="936" data-path="images/it-management/x6sms6m4ja/1671703717460-image.png" />

This service is now configured to allow Google integration.

Close the [login screen](https://itmc.i.moneyforward.com/login), reopen it, and connect to Google Workspace again.

[Google Workspace](/en/integrations/n0zl359vup-google-workspace)