Overview

As of October 23, 2023, Google has begun enhancing app access controls to better protect student data privacy. If your students use Google SSO to access SpacesEDU, or connect to their Google Drive in SpacesEDU, a Google Workspace administrator for your organization will need to follow the steps below.

What do I need to do?

Admins must mark SpacesEDU as a trusted app.

Steps to confirm third-party app settings

Google provides a guided experience for super admins and admins with the Security privilege.

1. Get started with the guided experience here.
2. Click Continue to view the first step.
3. Confirm settings for unconfigured third-party apps.
4. Choose the Allow users to access third-party apps that only ask for Google sign in info option.
5. Click Next.
6. Confirm settings for configured third party apps.
7. Review the apps and their settings in the Access (for top-leel org unit) column.
8. Click Add app > Auth App Name or Client ID > search for SpacesEDU.
9. Confirm SpacesEDU is set to Trust.
10. Review the confirmation details, then click Confirm.

What happens if we do not approve access for third-party apps?

Without completing these steps, users designated as under 18 will NOT be able to access SpacesEDU. The error below will occur when a user tries to sign in via Google.

• Error 400: access_not_configured - received when an OAuth connection is rejected because your app has not been configured.
• Error 400: admin_policy_enforced - received when an OAuth connection is rejected because the administrator has blocked your application.

Google Resources

Please view the below resources from Google's Help Center for more information.

• Confirm your third-party app settings by October 23, 2023
• Manage access to unconfigured third-party apps for users designated as under 18
• Google Workspace for Education Admin Console: How to review existing configured apps
• Third-party app access enhancements for Google Workspace for Education

Updated on: 18/12/2024