Home / Security / Google Workspace
Let your reps connect Gmail: mark FreightScout Trusted
FreightScout is still in Google's review for reading Gmail. Until that review is done, Google lets a person give FreightScout read access to their own Gmail only when their Google Workspace admin has marked FreightScout as Trusted. This page is for that admin. It takes about five minutes and needs no FreightScout login.
Last updated 22 October 2026.
What you need before you start
- A super admin account for your Google Workspace, or an admin role your company has allowed to manage API controls.
- FreightScout's OAuth client ID. Someone at your company with FreightScout admin access can copy it from Settings > Connections > Google Workspace in FreightScout. It sits under the steps, with a Copy button. A client ID is not a password, so it is fine to send it to you by email or chat.
- The mail domains your reps use, for example
yourcompany.com. You can trust FreightScout for your whole organization, or only for the people on those domains, an organizational unit or a group.
The steps in Google Admin
- Sign in to admin.google.com with that account.
- Go to Security, then Access and data control, then API controls.
- Open Manage Third-Party App Access, then choose Configure new app.
- Search for FreightScout's OAuth client ID and select FreightScout.
- Choose who it applies to: everyone whose mail is on the domains your reps use, or your whole organization.
- Choose Trusted, then Finish.
Google can take a few minutes, and sometimes longer, to apply the change across your Workspace.
Then tell FreightScout
Back in FreightScout, the person at Settings > Connections > Google Workspace ticks the mail domains you trusted and presses I've marked FreightScout as trusted. From then on, a rep on one of those domains who connects Gmail is asked for read access as well as send. Reps outside those domains can still connect, for sending only. The same card shows which reps can read and send and which still need to reconnect, and it can send them a reminder inside FreightScout.
What FreightScout asks Google for
| Access | Who is asked | What it is for |
|---|---|---|
openid, email, profile | Every rep who connects | Knowing which person and which address connected. |
gmail.send | Every rep who connects Gmail | Sending the email a rep writes or approves in FreightScout, from their own address. |
gmail.readonly | Only reps on a domain you trusted | Reading the rep's own mailbox to spot replies to the email they sent from FreightScout. Read only: it cannot send, change or delete mail. |
gmail.readonly for a shared inbox | Only a mailbox a FreightScout admin connects on purpose, such as a paperwork inbox | Picking up documents that arrive there. Read only, and never used to send. |
calendar.events | Only a rep who connects their calendar | Putting meetings a rep books in FreightScout on their own calendar. |
Each person connects only their own mailbox, and FreightScout never reaches a mailbox nobody connected. Nobody can connect another person's mailbox. FreightScout's use of information from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Gmail content is not used to train AI models, and FreightScout staff don't read it except with consent for specific messages, for security, or to comply with the law. The full detail is in the privacy and messaging policy and on security.
What your reps see
- A rep who connects Gmail after you trusted FreightScout sees Google's usual consent screen, listing read and send, and approves it for their own account.
- A rep who already connected for sending only shows as Sending only, needs to reconnect on the card. Reconnecting once from FreightScout asks for read access as well.
- A rep whose address is not on a trusted domain keeps sending only. Nothing breaks for them.
How to undo it
- In Google Admin: go back to Security, then Access and data control, then API controls, then Manage Third-Party App Access. Change FreightScout's access to Blocked, or remove the app from the list.
- In FreightScout: press Undo on the Google Workspace card. New Gmail connections go back to sending only.
- Any rep can disconnect their own Gmail from FreightScout at any time, and can remove FreightScout's access in their Google Account settings.