Skip to content
Eigenlaut
Start free trial
Documentation

Connect Google Workspace

Eigenlaut works through domain-wide delegation: a super admin authorises its service account for three scopes. This takes about a quarter of an hour, plus the time Google needs to apply it.

You need

A Google Workspace super admin. Only super admins see the delegation page, and only they can verify the connection.

Good to know

Google applies new delegations within 24 hours, usually much sooner. Previews and dry runs change nothing in Gmail.

  1. Sign in to Eigenlaut

    Open the dashboard and sign in with your Google Workspace account. Your organisation is created at the first sign-in and the 30-day trial starts. The Setup page shows Eigenlaut’s client ID and the three scopes, each with a copy button.

  2. Open domain-wide delegation

    In the Google Admin console (admin.google.com), go to MenuSecurityAccess and data controlAPI controlsManage Domain Wide Delegation and choose Add new.

  3. Enter the client ID and the three scopes

    Paste the client ID from the Setup page. Then add each scope as its own entry:

    • https://www.googleapis.com/auth/admin.directory.user.readonly
    • https://www.googleapis.com/auth/gmail.settings.basic
    • https://www.googleapis.com/auth/admin.directory.group.member.readonly

    Choose Authorize. If your organisation uses multi-party approval, a second super admin approves the change. The client ID cannot be edited later; to change it, delete the entry and add it again.

  4. Verify the connection

    Back on the Setup page, choose Verify. Eigenlaut checks that the directory lists you as a super admin and that it can read your Gmail send-as addresses. When every check passes, your organisation is active.

    If a check says the client is not authorised yet, Google is still applying the delegation, or a scope is missing. Compare the three entries and try again later.

  5. Design, test, roll out

    • Add your company details and colours in the settings, then pick one of the four starter templates.
    • Add rules if teams need different signatures. Without rules, everyone gets the default template.
    • Start a dry run and look at the result for each user. Nothing is written to Gmail yet.
    • Run it live, then switch on the daily schedule so new starters and changes follow by themselves.

When something does not work

  • Not authorised yet: the delegation is missing, incomplete or still on its way. Check the client ID and the three scopes, then wait up to 24 hours.
  • Not an administrator: verification has to run as a super admin of the organisation.
  • A logo does not show: Gmail loads signature images from public HTTPS addresses only. Use a logo URL that opens without signing in.

To stop Eigenlaut at any time, delete its client ID on the same Admin console page. More on that in the security overview.