Google API Manual Authentication – Complete Step-by-Step Setup

If you're using a GSheetConnector WordPress plugin to connect with Google Sheets or Google Drive, you'll need to connect Google API with manual authentication. This tutorial walks you through the entire process to create Google API Client ID and Secret Key, set up OAuth Consent Screen, and publish your app for verification.

Table of Contents

1. Create a Google Cloud Project and Enable APIs
2. Configure OAuth Consent Screen & Create Credentials
3. Publish and Verify Your Google App

Step 1: Create a Google Cloud Project and Enable APIs

1. Login to your Google Account and go to the Google Developer Console.
2. Create a new project:

3. Open the navigation menu (☰) and select your project.

4. Click ENABLE APIS AND SERVICES

Search and enable the following APIs:

• Google Drive API
  
  
• Google Sheets API
  
  

Step 2: Configure OAuth Consent Screen & Create Credentials

1. Go to APIs & Services > OAuth consent screen.

2. Select User Type (Internal or External), then click Create.

1. Sign-in to Google Cloud Console
2. Select the project ID
3. Go to OAuth Consent Screen under APIs & Services
4. Go to User Type
5. Select Make Internal
6. Click Save

1. Create an Organization by following the Quickstart Using Organizations instructions.
2. Migrate the project into the organization you created as shown in Migrating Existing Projects into the Organization.

User Type: Internal

What is “User Type: Internal” in Google Cloud?

When you set the User Type to Internal, it means only users within your Google Workspace organization can log in to your app using Google OAuth.

 When can you use “Internal” user type?

You can only select Internal if:

1. Your Google Cloud project is linked to a Google Workspace (formerly G Suite) account.
2. You are logged in with a Google Workspace user (not a personal @gmail.com account).
3. Your Google Cloud project is under an Organization, not a personal project.

 When should you use an Internal app?

• For internal company tools
• Employee dashboards
• Automation using Google Sheets/Docs within the company
• Any app only your team or company will use

 How to set the user type to “Internal”?

Step 1: Use a Google Workspace Account

Make sure you're logged in with a Google Workspace account (not @gmail.com).

Step 2: Go to Google Cloud Console

       https://console.cloud.google.com/

Step 3: Select or create your project

Step 4: Go to

APIs & Services → OAuth Consent Screen

Step 5: Select User Type: Internal

If your project is under a Google Workspace organization, you will see the “Internal” option here.

Step 6: Fill out app details

• App Name
• Support Email
• App Logo (optional)
• App Domain, Privacy Policy URL, Terms of Service URL (if required)

Step 7: Configure Scopes

You do not need to add test users for an Internal app.

Why don’t you see the “Internal” option?

Common reasons:

To check if your project is under an organization:
Go to IAM & Admin → Settings, and check if there's an organization listed.

Summary:

User Type: External

What is “User Type: External”?

• External means any user with a Google account (Gmail or Workspace) can log in to your app using Google OAuth.

• This is required when your app is public or used outside your organization (like customers, clients, or general users).

When to use External?

Use User Type: External when:

• Your app is public
• Your users are NOT limited to your Workspace organization
• You’re planning to publish the app on a website or SaaS product
• You want to allow any Google user to authenticate and access Google Sheets, Drive, etc.

How to Set User Type: External in Google Cloud

Step 1: Open Google Cloud Console

https://console.cloud.google.com

Step 2: Select or Create a Project

• Make sure you are using the correct project for your app.

Step 3: Go to OAuth Consent Screen

• In the left sidebar → Go to:
  APIs & Services → OAuth consent screen

Step 4: Select User Type:

• Choose External
• Click Create

Step 5: Fill App Information

You will need to provide the following:

Step 6: Add Scopes

• Add only the minimum required scopes
• If you add Sensitive or Restricted scopes, you must go through verification

Step 7: Add Test Users (Optional During Development)

• Before verification, you must list the email addresses of users who can test the app (max 100 test users).
• After verification, anyone can use the app.

Step 8: Save and Submit for Verification

If you’re using Sensitive or Restricted scopes, you need to:

• Submit for OAuth verification
• Upload a YouTube video showing the login flow
• Provide a link to your app
• Have a verified domain
• Add a privacy policy

 Scopes Warning

Summary:

🎥 Watch this sample video for Google App Verification

3. Add basic branding details and configure your project settings:

4. Generate OAuth Client ID and set the Application Type to Web Application:

5. Add your redirect URIs depending on the plugin:

The plugin’s redirect URL is given below. Please use the provided redirect URL based on the plugin you are using. Replace {your-domain.com} with your actual domain.

• CF7 GSheetConnector: https://{your-domain.com}/wp-admin/admin.php?page=wpcf7-google-sheet-config
• WP Forms GSheetConnector: https://{your-domain.com}/wp-admin/admin.php?page=wpform-google-sheet-config
• Gravity Forms GSheetConnector: https://{your-domain.com}/wp-admin/admin.php?page=gf_googlesheet
• Ninja Forms GSheetConnector: https://{your-domain.com}/wp-admin/admin.php?page=njform-google-sheet-config
• Formidable Forms GSheetConnector: https://{your-domain.com}/wp-admin/admin.php?page=formidable-form-google-sheet-config
• Forminator Forms GSheetConnector: https://{your-domain.com}/wp-admin/admin.php?page=formntr-gsheet-config
• WooCommerce GSheetConnector: https://{your-domain.com}/wp-admin/admin.php?page=wc-gsheetconnector-config
• Elementor Forms GSheetConnector: https://{your-domain.com}/wp-admin/admin.php?page=gsheetconnector-elementor-config
• Avada Forms GSheetConnector: https://{your-domain.com}/wp-admin/admin.php?page=avada-gsheetconnector-config
• DIVI Forms GSheetConnector: https://{your-domain.com}/wp-admin/admin.php?page=divi-db-google-sheet-config
• Easy Digital Downloads GSheetConnector: https://{your-domain.com}/wp-admin/admin.php?page=edd-gsheet-config

6. Add OAuth Scopes:

• ../auth/drive
• ../auth/drive.metadata.readonly
• ../auth/drive.file
• ../auth/spreadsheets
• ../auth/userinfo.email

🔒 Google OAuth Scopes – Internal vs External, Sensitive vs Restricted

🔑 Legend

✅ Allowed – You can use this scope
❌ Not allowed – Not usable without Google’s security assessment
🔴 Restricted – Needs security review and Google approval for External apps
🟠 Sensitive – Needs OAuth consent screen verification, privacy policy, and domain verification

Step 3: Publish and Verify Your Google App

1. Navigate to the Publishing Status section and click Publish App.

2. Submit for verification with Google.

Also Refer to Domain Verification Guide 📘 Read Google's domain verification guide

Need help with GSheetConnector integration?

Check out our full guide on Google Sheet API Settings and Configuration.

✅ You’ve now completed the Google API Manual Authentication setup. You can now connect your plugin securely with Google Sheets and Drive using OAuth.