Provider credentials

Select the workspace that owns the OAuth application and open Provider Apps. For Google and Microsoft, Moira Connect currently supports customer-owned credentials only. Create the provider application in your own Google Cloud or Microsoft Entra tenant before saving it here.

Copy the exact redirect URI shown for Gmail or Outlook into the provider console. Do not derive or shorten it. Then save the client ID and client secret in Moira Connect.

The secret is encrypted at rest and is never returned to the browser after it is stored. Saving credentials marks the application as configured; it does not claim that provider authorization has succeeded.

Use a test project to complete a real OAuth authorization. Moira Connect consumes single-use state, verifies the provider and account match, exchanges the code with the customer-owned application, and marks the provider app validated only after that exchange succeeds.

• provider_callback_mismatch means the submitted redirect URI differs from the runtime callback.
• customer_owned_credentials_required means a Google or Microsoft request attempted to use Moira-managed credentials.
• A failed validation state requires checking the provider client, secret, consent screen, and allowed redirect URI.

Create a branded connection page and run one authorization in a test project before enabling the same provider application for production traffic.