Step 1: Create your OAuth client
Open the <a href="https://console.cloud.google.com/apis/credentials" target="_blank" rel="noreferrer">Google Cloud Console</a> and create an OAuth 2.0 client ID. Choose "Web application" and paste the provider callback URI printed by the Riposte admin portal (for embedded mode it's usually http://localhost:4000/riposte/providers/google/callback). Save the client ID and secret—we will use them in Riposte.
Step 2: Select Gmail scopes
Launch the <a href="/tools/oauth-scope-planner" target="_blank" rel="noreferrer">OAuth scope planner</a> and enable the capabilities your product needs (email, calendar, contacts). Copy the Gmail + People API scopes it generates and keep them handy—you will paste them into the admin portal when you enable the provider.
Step 3: Paste credentials into Riposte
Return to the Riposte admin portal, choose Google as the provider, and paste the client ID, client secret, and scopes you just collected. Save the configuration and run the built-in connection test to confirm Riposte can complete the OAuth flow.