Google Login and Google Drive API instructions

Product: BrassRing on Cloud

Google Login and Google Drive API
  • Contact your organizations IBM representative before the Google Login and Google Drive API keys are updated as the candidate experience might be impacted by the update.
  • When candidates log in to Talent Gateways by using the Sign In with Google option, a unique ID is created and mapped, and their Talent Gateway account is connected to their Google profile. For these candidates to continue logging in to the Talent Gateway by using their Google profile, this unique ID must not change.
  • If the API keys are updated in Workbench, the candidates that were accessing the Talent Gateways with their Google profile are not able to view their previous job submissions. This is because a new unique ID is created for the new API key.
  • If the API key is updated, Google returns a different Unique-ID for the same Google credentials. The IBM Talent Gateway creates a new account for that profile instead of logging the candidate into the old profile, as the mapping for this new Unique-ID cannot be found.
  • There are two options for resolution:
    • Revert to the Old API keys, so that the old candidates who logged-in before the new API keys were updated, can safely log in to their profile. This can affect the candidates who logged-in after the new API keys update.
    • Leave the new API keys as it is and ask the candidates (who submitted with old API keys) to log in to the Talent Gateway and update their profile in the profile page (candidate zone) with the same details as before. This stacks their profiles with the previous talent record in BrassRing. After it is stacked, they can see the previously submitted applications in the TG.
  • The process on this page shows the process on a third-party website. This website and process is subject to change without notification. IBM is not responsible for the content on third-party websites.
Google Drive API instructions
This process must be done twice. Once for staging and again for production. Page Contents:
  1. Create the Client ID
  2. Create the API Key for the project
  3. Update the Google Drive Authentication
1. Create the Client ID
  1. Access https://console.developers.google.com/start, and select the Select a project pull-down menu.
    The Select a Project option
  2. Select New project.
    The New Project button
  3. Insert a project a name, and optionally insert a Location, then select Create.
    The configuration window
  4. Select ENABLE APIS AND SERVICES.
    The Enable apis and services button
  5. Search for Google Drive API, and select Google Drive API.
    The Google Drive API
  6. Select Enable. If the API has previously been enabled the Enable button cannot be selected.
    Selecting Enable
  7. After the API is enabled, select Create Credentials.
  8. Add credentials to your project screen:
    The Add credentials to your project window
    1. Which API are you using?: defaults to Google Drive API.
    2. Where will you be calling the API from?: select Web browser (Javascript).
    3. What data will you be accessing?: select User data.
  9. Select What kind of credentials do I need?.
  10. Select Not Now.
    Selecting Not Now
  11. Add the credentials to the project.
    1. Insert a name.
    2. Authorized JavaScripts origins: Enter the URL from the list and select enter to add.
      • US Staging URL: https://sstagingjobs.brassring.com
      • EU Staging URL: https://stagingkrb-sjobs.brassring.com
      • US Production URL: https://sjobs.brassring.com
      • US Production URL: https://xjobs.brassring.com
      • EU Production URL: https://krb-sjobs.brassring.com
    3. Authorized redirect URLs: Enter the URL from the list and select enter to add.
      • US Staging URL: https://sstagingjobs.brassring.com/TGWEBHOST/mobile/cscallback.aspx
      • EU Staging URL: https://stagingkrb-sjobs.brassring.com/TGWEBHOST/mobile/cscallback.aspx
      • US Production URL: https://sjobs.brassring.com/TGWEBHOST/mobile/cscallback.aspx. For US Production both the URLs should be added.
      • US Production URL: https://xjobs.brassring.com/TGWEBHOST/mobile/cscallback.aspx. For US Production both the URLs should be added.
      • EU Production URL: https://krb-sjobs.brassring.com/TGWEBHOST/mobile/cscallback.aspx
      The Create an OAuth 2.0 Client ID window
  12. Select Refresh.
  13. Select SET UP CONSENT SCREEN.
    Selecting set up consent screen
  14. Enter the product name.
  15. Insert the Datacenter in the Authorised Domains field. For US PRODUCTION, enter both the URLs.
    • US Staging URL: sstagingjobs.brassring.com
    • EU Staging URL: stagingkrb-sjobs.brassring.com
    • US Production URL: sjobs.brassring.com
    • US Production URL: xjobs.brassring.com
    • EU Production URL: krb-sjobs.brassring.com
  16. If needed, add an Application logo.
  17. Select Add Scope.
  18. Select ../auth/drive.readonly See and download all your Google Drive files.
  19. Select Add.
  20. In the Authorized domains field:
    • If your organization is not using a vanity URL for the Talent Gateway, insert brassring.com.
    • If your organization is using a vanity URL for the Talent Gateway, insert the vanity URL.
  21. Insert the Talent Gateway page into the Application Homepage link field.
  22. In the Application Privacy Policy Link field:
    • If your organization is not using a vanity URL for the Talent Gateway, insert the Privacy Policy link: 
      https://jobs.brassring.com/TGnewUI/PrivacyPolicy.html
    • If your organization is using a vanity URL for the Talent Gateway, use the privacy policy that's hosted on the domain, and ensure it is available on the footer of the Talent Gateway. This helps in Google's approval process.
  23. Select Submit for verification.
  24. As a sensitive scope has been configured, verification is required. In the Scopes justification field, insert the message: 
    IBM Kenexa BrassRing on Cloud is an applicant tracking system which deals with posting jobs and candidate applying to the same via the home page URL provided in OAuth section of the app. The home page URL is a career site and the home page displays the search boxes to search for the career opportunities and candidates can start applying by creating a login. So, the main functionality of the home page is that to display jobs based on search criteria selected and also to the previous applied jobs status by logging in. Now, the Google drive functionality will be used in the process uploading resume for the selected job. Candidate initially logs in and then selects the upload button to import their documents like Resume, Cover letter, attachments, etc. to upload during the application process.
  25. Select Submit.
2. Create the API Key for the project
  1. To create the API Key for the project, select Create credentials > API Key.
    Selecting API Key
  2. Note the API Key or copy it, and select Close.
    The API Key for copying
  3. Select Create credentials > OAuth Client ID.
    Selecting OAuth Client ID
  4. Insert the details:
    1. Application Type: Web Application
    2. Name: Provide a name as necessary
    3. Authorised JavaScript origins:
      • US Staging URL: https://sstagingjobs.brassring.com
      • EU Staging URL: https://stagingkrb-sjobs.brassring.com
      • US Production URL: https://sjobs.brassring.com
      • US Production URL: https://xjobs.brassring.com
      • EU Production URL: https://krb-sjobs.brassring.com
    4. Authorised redirect URLs:
      • US Staging URL: https://sstagingjobs.brassring.com/TGWEBHOST/mobile/cscallback.aspx
      • EU Staging URL: https://stagingkrb-sjobs.brassring.com/TGWEBHOST/mobile/cscallback.aspx
      • US Production URL: https://sjobs.brassring.com/TGWEBHOST/mobile/cscallback.aspx. For US Production both the URLs should be added.
      • US Production URL: https://xjobs.brassring.com/TGWEBHOST/mobile/cscallback.aspx. For US Production both the URLs should be added.
      • EU Production URL: https://krb-sjobs.brassring.com/TGWEBHOST/mobile/cscallback.aspx
  5. Select Create.
  6. Note the Client ID and Client Secret Key, and select OK.
    The Client Id and Client Secret
  7. Select the name of the API to view the credentials.
    Selecting the name of the project
  8. Note the Client ID and the Client secret. This information needed to be entered Workbench by an IBM Representative. Contact your organizations IBM representative with these details to complete the integration configuration.
    Entering the details into Workbench
Update the Google Drive Authentication
In July 2020 the Google Drive Authentication was updated. To update existing configurations:
  1. Access https://console.developers.google.com/
  2. Select OAuth consent screen > Edit App.
  3. Insert the Application Name.
  4. Insert an Application logo if needed.
  5. Select Scopes for Google APIs > Add Scope.
  6. Select ../auth/drive.readonly See and download all your Google Drive files.
  7. Select Add.
  8. Insert brassring.com in the Authorized domains field.
  9. Insert the Talent Gateway page into the Application Homepage link field.
  10. Insert the Privacy Policy link: https://jobs.brassring.com/TGnewUI/PrivacyPolicy.html into the Application Privacy Policy Link field.
  11. Select Submit for verification.
Email WatsonTalentTraining@us.ibm.com if you have a suggestion for improvement, or encounter an issue on this documentation. Include the product and page title in your email.