Connecting the Google account

Every user must connect their Google account via OAuth2. The connection creates an external account, stores encrypted tokens, and enables the Calendar, Contacts, and Gmail panels.

Connection steps

1. Open your profile (user menu → Profile) and go to External Accounts.
2. Click Google.
3. A new window opens the Google sign-in screen (choose the correct business/personal account).
4. Approve the required scopes (Calendar, Contacts, Gmail). Without them the respective panel stays disabled.
5. After redirecting back to CRM you should see Connected and configuration panels for each product.

What is stored

Only OAuth tokens (access/refresh) are saved; no password is stored. If the token is revoked in Google, the integration auto-disconnects.

Verify connection

• The external account detail shows a green status and sections for Calendar / Contacts / Gmail.
• If the Gmail panel is missing, the mail server/host may not be gmail.* or your Espo version is older than 5.6.
• On login errors, click Connect again – existing tokens are overwritten.

Disconnecting

1. Open External Accounts → Google in your profile.
2. Click Disconnect (trash icon). Tokens are wiped and all panels are disabled.
3. The sync job skips this user until the account is reconnected.

Common issues

• Access blocked / This app is not verified – make sure the Google Cloud app is published (production) and has Calendar/People/Gmail scopes.
• redirect_uri_mismatch – use the exact callback URL shown in admin (Integrations → Google → Redirect URI).