How marketplace apps use Google Apps data
The third-party apps available in the Google Apps Marketplace and through your Admin console can integrate with your Google Apps data in a number of different ways.
The sections below describe each integration point, with links to get more information about each one.Mail integration
Apps that integrate with mail have access to your Gmail data.
Two common methods of mail integration are via sidebar gadgets and contextual gadgets.
Contextual gadgets draw information from the web based on the contents of an email message. For example, contextual gadgets can display content previews based on links in a message.
Contextual gadgets make use of the following APIs:
- Extractor APIs: Contextual gadgets use this API to detect contextual clues in email, determine which types of content trigger the gadget, and pass the triggering content to the gadget. Learn more
- IMAP over OAuth API: Gmail supports the IMAP protocol for accessing and sending messages. This API lets the gadget have IMAP access to Gmail via OAuth. Learn more
- GMAIL Atom Feeds API: Contextual gadgets use this API to feed updates from websites, blogs, and Gmail. Learn more
If you install an application that uses contextual gadgets, we recommend that you alert your users to the possibility that the gadgets can respond to the content of their email messages.
For more information about how apps integrate with Gmail, see https://developers.google.com/gmail/.
Apps that integrate with your calendar have access to your Google Calendar data, including invitations and events.
The Google Calendar DATA API allows apps to edit calendars, create and delete calendar events, send invitations, and more. Learn more
Apps that integrate with the Google app launcher are listed on the More menu in Google Apps.
Apps that integrate with Single Sign-On allow users to securely sign in to the apps using their Google Apps credentials. This can be done in a few ways:
OAuth2 is an open protocol that allows secure authorization in a simple and standard method. All new apps available through the admin console will use Oauth2 for Single Sign-On. Learn more
OpenID Federated Login Service for Google Apps allows users to securely sign in to third-party websites using their Google Apps user account. Learn more
SAML Single Sign-On allows secure web domains to exchange user-authentication and user-authorization data. Using SAML, an online service provider can contact a separate online identity provider to authenticate users who are trying to access secure content. Learn more
Apps that integrate with Google Drive are able to programmatically access and manipulate user data stored with Google Drive files, including Google Docs, Sheets, and Slides. For example:
- Retrieve documents that match specific keywords, categories, or metadata
- Modify the sharing permissions of documents and folders
- Review, download, or publish a document’s revision history
- Export documents
- Create online backups of local documents, spreadsheets, presentations, and PDFs
- Create folders, and move documents and folders in and out of folders
Integration is provided via the Google Drive SDK. Learn more
Apps that integrate with contacts use the Contacts Data API to access and edit Gmail Contacts. Learn more
In general there are two types of Independent Software Vendor (ISV)-created Marketplace apps that integrate with our services: supported and unsupported.
While we welcome all innovation and integration with our services, note that Marketplace apps which use these implementation types may not always work.
It's important that Google maintain the flexibility to dynamically change our products to provide the service, scale, availability, and innovation our customers expect. If we make substantive changes to a product, we also strive to make the capabilities available that best allow integration with our services.