When enabling "Google Workspace API" integration by clicking on Authenticate with Google Workspace, integration fails with the following error: 

Access Blocked: Authorization Error. Error 400: admin_policy_enforced

• Google Workspace
• Provisioning
• Error

1. Sign in to the Google Workspace admin console and make the necessary changes:

1. Go to SecurityAccess and data control API controls.
2. Click MANAGE GOOGLE SERVICES. Okta can access any service whose Access level is Unrestricted. If a service that Okta needs to access is marked as Restricted, grant the Okta app Trusted app status in the following steps.
3. Click API Controls to return to the API controls page.
4. Click MANAGE THIRD-PARTY APP ACCESS.
5. Click Okta.
6. Expand Access to Google data.
7. Select either Limited or Trusted access. Choose Limited to only allow Okta to request access to unrestricted Google data. Choose Trusted to classify Okta as a trusted app and allow it to request access to all Google data. Choosing Limited is the most secure option.
8. Click Save.

Okta's use of information received from Google's APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. For information about Okta's privacy practices, see Okta Privacy Policy.

 

2. Go to Okta admin console and navigate to Applications > Applications > Google Workspace > Provisioning tab and click Configure API Integration.

3. Select Enable API integration, and then click Authenticate with Google Workspace.

4. Enter the Google Workspace Admin account credentials:

• Enter the admin username.

• Enter the admin password.

• Review the list of permissions Google will grant Okta to perform in the Google Workspace tenant. If acceptable, click Allow.
   

5. Back on the Provisioning page in Okta, a message confirming successful authentication will be seen. Click Save.
 

Related References

• Google Workspace Integration guide