Delegate domain-wide authority to your service account

[Manash Sengupta]

Hi All,
A very quick question. Is it possible to access the integration of calendar  from a test server as well as a production server. I believe all admin / company credentials are associated  to the production domain.

Or, as long as the service accounts client id is authenticated, there should not be any problem associating from either domain.
Thanks,
Manas

[Manash Sengupta]

Can anyone help please. I am dead stuck.
We have two instances one production and one test.

How do I run the flow from test - I want to display a google calendar (iframe ). I created (added events) using the php client APIs and a service account and client id. I am getting 403 error .

[Matt Erickson]

Make sure you have the service account defined in https://console.developers.google.com in your calendar API (which you probably already do) and the calendar you are attempting to access is WITHIN the domain of the service account.

And then in https://admin.google.com -> more controls (at the bottom) -> Security -> Advanced Settings (show more) -> Manage API client access.

The setting there should read

**unique_string_from_credentials**.apps.googleusercontent.com :https://www.googleapis.com/auth/calendar
where
Service account : scope

You may also need https://admin.google.com -> Google Apps -> Calendar -> Sharing Settings -> Internal sharing should be set to “Share all information”

If you need more explanation please feel free to ask.

Not 100% sure but my service account was created by a user who is an admin of the app domain as well.

I've also outlined how I did this in my blog at Google Calendar PHP Migration