Can gam report on what "authorized access" tokens are present?

[Jason Haar]

Hi there

We have a bunch of iphone users who have set up gmail on their phones by following their nose. End result is their phones *do not* show up in the "Devices" reports. This is because the native Mail app in iphone uses IMAP/calDAV/cardDAV with OAUTH instead of the "GSync" apis

The only way their existence can be detected is via the "User->Security->Authorized access" area in the web console. These are *not* classified as "tokens"  either (although that's what they are - way to go Google)

Is there any way I could use GAM to suck that data out, so that I can deduce the presence of these phones (they show up as "Service=IOS, Scope="Profile Information")

Thanks

Jason

[Jay Lee]

Yes. You should be able to take a look at the tokens a user with the iOS Gmail app installed has:

https://github.com/jay0lee/GAM/wiki/SecurityExamples#listing-all-oauth-tokens-for-users

then, once you know the iOS app Client ID, you can search for it across users:

https://github.com/jay0lee/GAM/wiki/SecurityExamples#checking-for-a-single-oauth-token-for-users

Jay

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-apps-manager@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/931add72-223e-40ad-adb2-e58173bbdbb6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Jason Haar]

You are TOO FAST Jay!!

Thanks a heap :-)

Jason