Some organizations require an administrator to approve third-party app access before users can connect email to Ping. If you see an admin approval screen while connecting Gmail or Outlook, share this article with your Microsoft Entra or Google Workspace administrator.

What you should send to your admin

I am trying to connect my work email to Ping so Ping can support email ingestion and Email Assistant features. Our identity provider is asking for administrator approval before the connection can finish. Can you review and approve the Ping email app for my account or organization?

Include:

  • The email provider you are connecting: Microsoft Outlook / Microsoft 365 or Google Gmail / Google Workspace
  • A screenshot of the approval screen, if available
  • The email address you use to sign in to Ping

Microsoft Entra admin approval

Use these steps if your organization uses Microsoft 365, Outlook, or Exchange Online.

Fast approval link

A Microsoft administrator can approve the Ping email app directly from this link:

Approve Ping Email in Microsoft Entra

After approving, ask the user to return to Ping and reconnect from Settings > Integrations > Email.

Manual Entra approval

  1. Sign in to the Microsoft Entra admin center as a Global Administrator, Cloud Application Administrator, or Application Administrator.
  2. Go to Identity > Applications > Enterprise applications.
  3. Search for the Ping app that appears in the user's approval request. Depending on the connection, this may appear as Ping Assistant or Ping Assistant Email.
  4. Open the application and go to Permissions.
  5. Review the requested delegated Microsoft Graph permissions.
  6. Select Grant admin consent for [your organization].
  7. Confirm the consent prompt.
  8. Ask the user to return to Ping and reconnect from Settings > Integrations > Email.

If the app is not listed yet, have the user attempt the connection once, then refresh Enterprise applications and search again.

Google Workspace admin approval

Google does not provide a Microsoft-style one-click adminconsent URL for this type of user-delegated Gmail OAuth connection. A Google Workspace admin should approve Ping in the Google Admin console.

Ping Gmail OAuth client ID

Use this OAuth client ID when searching or configuring the app in Google Admin: 143123883732-5af67btno3cb4cjaqi5seen9hp72p3es.apps.googleusercontent.com

Requested Gmail scopes

Ping requests the Gmail access needed to read and classify messages, manage labels, create drafts, and identify the connected Google account:

Configure Ping in Google Admin

  1. Sign in to the Google Admin console with a Super Admin or an admin role that can manage app access control.
  2. Go to Security > Access and data control > API controls.
  3. Open App access control or go directly to API controls.
  4. Select Manage App Access.
  5. Under configured apps, choose Configure new app.
  6. Search by the Ping Gmail OAuth client ID above.
  7. Select the Ping app from the search results.
  8. Choose whether approval applies to the whole organization or specific organizational units.
  9. For access, choose Trusted or Specific Google data with the Gmail scopes listed above.
  10. Save the configuration.
  11. Ask the user to return to Ping and reconnect from Settings > Integrations > Email.

If the app does not appear while searching by client ID, have the user attempt the connection once, then refresh the Google Admin console and search again. The attempted connection may also place Ping under Apps pending review, where an admin can configure access.

What Ping requests

Ping uses delegated user access. That means Ping acts on behalf of the connected user and does not receive organization-wide mailbox access just because one user connects.

For email features, Ping may request access needed to read and classify messages, manage email labels or mailbox settings, keep the connection active, and identify the signed-in user. The exact permission names can vary by provider and by the specific connection flow shown in your admin console.

After approval

After admin approval is granted:

  1. Ask the user to refresh Ping or sign out and back in.
  2. Have them go to Settings > Integrations > Email.
  3. Have them reconnect Gmail or Outlook.
  4. Confirm that the email connection shows as connected.

If approval is still blocked

If users still see an approval screen after admin consent is granted, wait 5-10 minutes for the change to propagate, then retry in a new browser window. If the issue continues, contact Ping support and include the user's email provider, screenshots of the approval screen, and screenshots of the app permissions page in Entra or Google Admin.