Our company is using more and more google tools (Google Tag manager, google anyltics, google 360, google maps...). Each of these tools allows us to manage users and manage authorisations (we have personal google accounts, "company" google accounts and accounts from users in external partners). We are reaching a point when managing all these accesses separately becomes unwieldly. Is there a way to manage all these authentications centrally ?
We are thinking of a tool like Active Directory or its sister AAD where you can centrally disable an account and block the user from accessing all applications. This is especially handy when users leave the company. (In an even more advanced scenario we would like to grant access to certain users only for a certain amount of time - like until a marketing campaign finishes but we realize most tools don't support this).
So I was wondering whether this is possible out-of-the-box or if needed with a third party application ?
Related
I would like to use LinkedIn's Connections API to retrieve the 1st degree connections of users registering on my application. But, "The use of this API is restricted to those developers approved by LinkedIn and subject to applicable data restrictions in their agreements.". Has anyone experience in getting approved and what are the main points to consider before applying? And, how can we apply? Thanks!
To access any APIs you'll first need to setup a business page on LinkedIn (instructions here) for app verification then head to the developer page to create an app
To access their restricted APIs you'll want to reach out to their support team via the contact us page and request access; specifically looking for a Relationship Manager if you have an existing business relationship or a Business Development contact per the compliance docs:
The use of these APIs is restricted to developers approved by LinkedIn.
Reach out to your LinkedIn Relationship Manager or
Business Development contact as you will need to meet certain criteria and sign an API agreement with data restrictions
in order to use this integration.
I want to show google analytics dashboard to my users. It is not possible to give access of "google analytics dashboard" to all users. So I want to integrate it on my own website. Will it be possible to integrate google analytics dashboard on a particular website?
This question gets asked quite a bit. It is important to understand the security model for the API. All Google APIs use OAuth2.0 to authenticate the user. This is designed to make it easy to use the API to access the Users's data on behalf of the user. In contrast you will need to do work to show Your data to your users.
With that said, an example of what you are looking for is the Server side Auth example provided by the Analytics API team.
The simplest answer is to query the API on the server side, with a service account and serve that data as you serve any other data to your users. Read the scenarios in detail, and pick one that best suits your end goals. Understand how the API views the following entities.
A User uses an application.
A Developer develops Application.
An Application has a project id and its associated credentials.
A user authorizes an application to access their data via the API.
You are breaking this paradigm because you are the user and developer from the API's perspective. You want to share your data with people who are not authorized to view it, so you will need to use a service account to access that data and share it directly with your users.
Also remember to add the service account to Analytics View you wish it to access.
Check out EmbeddedAnalytics if you prefer not to get bogged down learning oAuth2, the CoreReporting API, and lastly a charting tool. We simplify the process. All you do is create your chart and embed a snippet of code in your site where you want the chart/dashboard to show.
I would like to enable (some) of my users to view my website's analytics data.
Our website has a bunch of groups where users can add content. I would like to enable certain users (group admins), to view usage statistics for that specific group. Ofcourse the data should only be accessable to those users with the VIEW_ANALYTICS right, not to any others.
Is there any way to do this in Google Analytics, or is there some other platform I could use to easily achieve this goal (we use AWS for our hosting)?
Regards,
klmdb
The Google Embed API allows you to display analytics data in your own pages. Pages that are only accessible to the members of your VIEW_ANALYTICS group.
You can create a service account and give it the appropriate access in the analytics user management for the property.
You also authorize the service account to use the embed API in the developers API console. (I don't have enough points to include more than two links in an answer.) In the API console you can generate a private key (p12 or json format) which you then use on your server to authenticate the request for analytics data.
You don't say which technologies you are using, but they show Java and Python examples of how to set up the authentication by the Service Account. I've also seen some node.js and php libraries.
This way you don't have to manage who has access through the google anayltics admin system, you just need to control who has access to your "dashboard" page.
I have done this all with client-side javascript and it works. Of course the client-side nature means that anybody who knows how to use browser debug tools can get our private-key, but in our particular case I'm not worried about it. On the other had it seem like you need to keep some security around this so I wouldn't recommend the client-side solution.
We're actively developing our PMD ads management tool. We have a number of customers who want to advertise but don't have a Facebook account of any kind. I have a two part question:
(1) Is their an API/programmatic way for us to create a proper user account for our client so the client can in turn log in to their fresh Facebook account and enter ads payment information? For example, I can imagine an open graph call like this:
createFBUserAccount(f_name:"Joe",l_name:"Smith",email:"joesmith#gmail.com",isbusiness:"false");
or for a person
createFBUserAccount(business_entity_name:"ACME Corp",email:"contact#acmecorp.com",isbusiness:"true");
(2) For users who don't want a Facebook account but still want to advertise on Facebook through us, what is the proper way to create their ads? Let's say this is a business interested in buying External Website ads (or Mobile App Install, or any number of other ad units).
we currently don't have a way to create Ad Accounts through API. The user will have to create an account directly through https://www.facebook.com/advertising.
We also have business accounts (doc: https://www.facebook.com/help/131976240210052)
We require either a user account or business account to advertise with us.
Hope this is helpful.
My scenario is the following: We currently own an online rental marketplace that uses peer to peer bookings just like Airbnb. This means each user has a calendar for their property.We have a Vaway calendar for the bookings on our site however are wanting to integrate google calendar so we can be able to 2 way sync/asynchronous all the Ical calendars to each other from our partner sites who support it.
After much research I have tested my personal google calendar to see how the iCal works and it seems to work perfectly so we decided this architecture would need to be implemented on a much larger scale. This would be used in all new users signups to give our users an all in one calendar that syncs all our Partner sites into one completely synced google calendar for their listing. This basically allows a user who has their listing on 7 different platforms to sync to one calendar showing availability for them to keep track of inside Vaway account.
The google calendar would be completely separate from our Vaway calendar specifically to allow our users to sync all their property bookings from other sites into one integrated calendar.. The problem when reading about google calendar API is it requires OAuth 2.0 which is required user sign in from their existing google account (Calendar, Gmail...etc). Many of our users and new signups will not have google accounts and we do not want them to have to go through a google signup process to log into their calendar. Is there any way around OAuth 2.0? We really just need the functionality of the google calendar and its syncing capabilities inside our dashboard to give read write permission and sync back and forth 2 way with other calendars on other platforms.
With all of the features the google calendar has it seems to be perfect for what we are doing when testing. Each user that signs up with us will have google calendar in their Vaway dashboard provided by vaway however they will manage their own google calendar inside the Vaway platform for their property bookings. All calendars events/bookings would be public to allow the Ical syncing option to push through.
We do not want the users accessing this calendar outside of the platform because the pulls them away from the site. I'm not sure what solution would best suit this business model and am totally at my wits end here after researching. We are trying to keep our overhead low so google apps marketplace is not an option.
You really should reformulate your question, because it's really hard to read and understand right now.
But if I really get your question, you want to enable managing google calendar from a personal application without the end user having to log to any google personal account.
If this is clearly what you want to do, I suggest you to have a look to Service Account with OAuth2.0.
(See here : https://developers.google.com/accounts/docs/OAuth2#serviceaccount)
It will provide a service account for your application, from which you will be able to handle calendars for your app.
And here you will find a sample showing how to do it with Java. (https://code.google.com/p/google-api-java-client/wiki/OAuth2#Service_Accounts)