Verify Google Connection

SALESFORCE ADMIN

This is the final end-to-end post-install test. Run it from Salesforce after every configuration step is complete.

Where to run it

Salesforce → Relationship Intelligence Configuration → Verify Google Connection

Salesforce credential preflight

Before running the test, confirm that each of these exists and is granted to the running user — see Named & External Credentials.

External Credential: EIE_Relationship_Intelligence_Auth
Principal:           EIE_RI_Principal
Named Credential:    EIE_Relationship_Intelligence
Permission Set:      Relationship Intelligence

Expected result

Google Workspace connection verified successfully.

Success: true
Google Connection: Connected
Directory API: Operational
Domain Delegation: Verified
Gmail API: Operational

Check	Expected result
Success	`true`
Google Connection	Connected
Directory API	Operational
Domain Delegation	Verified
Gmail API	Operational

Relationship Intelligence is ready when all verification checks return successfully.

A successful result proves that:

Salesforce could access the Named Credential.
The running user had External Credential Principal Access.
The Real Bots package created its RS256 assertion.
EIE verified the Salesforce certificate and KID.
EIE resolved the correct tenant.
Google Domain-Wide Delegation was authorized.
Directory API access succeeded.
Gmail metadata access succeeded.

What this test proves

A successful result verifies the complete chain:

Salesforce
        →
Real Bots
        →
RS256 assertion
        →
EIE public API
        →
tenant resolution
        →
registered Salesforce certificate
        →
Google Workspace provider
        →
Domain-Wide Delegation
        →
Directory API
        →
Gmail API

Any failure isolates the break to one of those links. Map the message you receive to a cause in Troubleshooting.

Failure mappings

Failure	Likely cause	Where to fix
Invalid service-account credential	JSON is malformed, revoked, disabled, or belongs to another tenant	Google Cloud Service Account Setup
Delegation not authorized	Client ID is missing from Google Admin Console	Google Workspace Configuration
Unauthorized scope	One or more required OAuth scopes are missing or incorrect	Google Workspace Configuration
Directory API unavailable	Admin SDK API is disabled or the admin subject is invalid	Google Cloud Service Account Setup
Gmail API unavailable	Gmail API is disabled, the scope is missing, or the test mailbox is invalid	Google Cloud Service Account Setup
Domain mismatch	EIE Workspace Domain does not match the connected Google Workspace tenant	EIE Configuration
Subject not found	Workspace Admin Subject does not exist or is suspended	Google Cloud Service Account Setup
Mailbox not found	Test Mailbox is invalid, suspended, unlicensed, or outside the authorized tenant	Troubleshooting

Was this helpful?

PreviousNamed & External Credentials NextSecurity & Authentication

Last updated 1 month ago