---
title: "Securing Access of Gmail App from Unauthorized Applications"
slug: "securing-access-of-gmail-app-from-unauthorized-application"
updated: 2025-05-15T06:13:00Z
published: 2025-05-15T06:13:00Z
canonical: "help.scalefusion.com/securing-access-of-gmail-app-from-unauthorized-application"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Securing Access of Gmail App from Unauthorized Applications

Scalefusion’s OneIdP enables organizations to secure access to Google applications such as Gmail, Drive, and Chat by ensuring they are accessible only on Scalefusion-managed devices. While OneIdP performs the necessary checks to validate device management status, certain application behaviors limit its ability to detect whether the accessing application is authorized. As a result, end users may access corporate data from a managed device but through an unauthorized application, potentially posing a security risk.

The same objective can be achieved using either of the following approaches:

1. **Block login access to all third-party applications (e.g., Outlook, Edison Mail, etc.):** Implementing a security policy that prevents users from accessing their Gmail accounts through any application other than the official Gmail app (or other explicitly allowed Google applications).
2. **Block login access to specific third-party applications while allowing access to approved ones:** Provides an approach to managing which apps can access Gmail accounts.

Here are the steps in detail for both the approaches:

### **Block login access to all third-party applications**

1. Log in to the Google Workspace portal ([https://admin.google.com](https://admin.google.com)) with Admin credentials.
2. Navigate to **Security > Access and data control > API Controls >Settings** ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1747056580221.png)
3. Select the Organizational Units to which you want to apply the restriction.
4. Navigate to **Unconfigured third-party apps**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-5RSV11EO.png)
5. Select **Don’t allow users to access any third-party apps** and click on **Save**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-LX9K7747.png)
6. Now, users will be able to sign in to the service only through Google-related applications (e.g., Gmail, Drive, etc.)

### **Block login access to specific third-party applications** while allowing access to approved ones

1. Log in to the Google Workspace portal ([https://admin.google.com](https://admin.google.com)) with Admin credentials.
2. Navigate to **Security > Access and data control > API Controls >** **MANAGE THIRD-PARTY APP ACCESS**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-3RSN0THF.png)
3. Click on **Configure new app**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-S5XUKV3K.png)
4. Search for the application where User Sign-In needs to be blocked.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1747057603542.png)
5. Click on the app > Select **Scope** and click on **Continue**

**![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1747057710903.png)**
6. Select **Blocked** and click on **Continue**

**![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1747057798849.png)**
7. Click on **Finish.**
8. Users can now only sign in to the service through Google-related applications, excluding those on the block list.