# Google Service Account

SaaS integrations for Google Services can be authenticated using a [Google Service Account (opens in a new tab)](https://cloud.google.com/iam/docs/service-accounts). This method provides a more streamlined setup compared to the [OAuth2 authentication flow](/content/docs/integrations/saas-integrations/developer-reference/saas-oauth2/index.html), avoiding the need for a authentication call during setup.

## Required parameters [Permalink for this section](/content/docs/integrations/saas-integrations/developer-reference/saas_google_service_account#required-parameters/index.html)

- `Project ID`: The google cloud project ID under which the service account email operates
- `Client Email`: The email associated to the service account ( _e.g., [my-sa@my-project.iam.gserviceaccount.com](mailto:my-sa@my-project.iam.gserviceaccount.com)_)  
- `Pivate Key`: The RSA private key from your service account, found on the JSON key file ( _begins with -----BEGIN PRIVATE KEY-----_)

## Configuration example [Permalink for this section](/content/docs/integrations/saas-integrations/developer-reference/saas_google_service_account#configuration-example/index.html)

```
client_config:
  protocol: https
  host: www.googleapis.com
  authentication:
    strategy: google_cloud_service_account
    configuration:
    scopes:
        ...
```

The scopes are defined in a per-integration basis, as each of the google services has its own scope to be defined.

## Usage checklist [Permalink for this section](/content/docs/integrations/saas-integrations/developer-reference/saas_google_service_account#usage-checklist/index.html)

To use a Google Service Account for SaaS integration authentication, ensure the following steps are completed:

1. **Create a Google Cloud Project**  
   - Set up and configure a Google Cloud Project via the [Google Cloud Console (opens in a new tab)](https://console.cloud.google.com/).
2. **Create a Service Account**  
   - In the IAM & Admin section, create a new service account for your integration.
3. **Grant Required Roles and Permissions**  
   - Assign the necessary roles to the service account according to the APIs/resources it needs to access.
4. **Create and Download a Service Account Key**  
   - Generate a new JSON key for your service account.
   - Download and securely store the key file, which contains the private key and client email.

**Note:** The required OAuth `scopes` will vary for each Google service integration. See Google’s [OAuth 2.0 Scopes documentation (opens in a new tab)](https://developers.google.com/identity/protocols/oauth2/scopes) or the API documentation for guidance.