Classla and Google Classroom for Workspace Admins

A teacher at your school wants to connect Classla to Google Classroom. This page says what that connection does, what it asks for, and what you need to allow it. It is short because the integration is small.

For Google Workspace admins

What It Does

When a teacher publishes an assignment in Classla, Classla creates one assignment in the linked Google Classroom course so students see it in their Classroom stream and calendar. When the teacher renames it, changes the due date, or unpublishes it, Classla updates or removes the Classroom item. That is the whole feature. It is one way, from Classla to Classroom.

What Classla Posts

  • The assignment title.
  • The due date, when the assignment has one.
  • A message the teacher writes and can edit before it posts.
  • A link back to the assignment in Classla.
  • The name of a Classroom topic, taken from the assignment's main tag in Classla.

The Classroom assignment is created ungraded. The only thing attached is one link back to the assignment in Classla. No files are attached and students submit nothing in Classroom.

What Classla Reads

The connected teacher's list of Classroom courses, so the teacher can choose which one a Classla course links to. In a course the teacher has linked, Classla also reads that course's topics, and the assignments Classla itself posted there, so it can keep them up to date. It reads nothing else.

What Classla Stores

  • An encrypted refresh token for the connected teacher's Google account.
  • The Google account id and display name of the connected teacher.
  • The Classroom course id each linked Classla course or section points at.
  • The Classroom coursework id of each assignment Classla has posted.

What It Does Not Do

  • It sends no student data to Google. No names, no usernames, no work, no scores.
  • It does not read rosters, student profiles, or grades.
  • Grades do not push to Classroom.
  • Students never sign in to Google through Classla. Only teachers connect.

OAuth Scopes

Classla requests exactly three Classroom scopes, plus the basic sign-in scopes (openid and profile) that give the connected teacher's Google account id and name. The three Classroom scopes are Google "sensitive" scopes, not "restricted" ones.

https://www.googleapis.com/auth/classroom.courses.readonly
To list the Classroom courses the connected teacher teaches, so they can pick which one a Classla course links to.
https://www.googleapis.com/auth/classroom.coursework.students
To create, update, and delete the assignment Classla posts in that Classroom course.
https://www.googleapis.com/auth/classroom.topics
To read and create topics in the linked Classroom course, so an assignment's topic follows its main tag in Classla.

OAuth Client ID

This is what you add in the Admin console to mark Classla as Trusted.

Client ID: available on request. Email camden@classla.org and it comes back the same day.

How to Allow It

Two settings, both in the Google Admin console. Either one being off is enough to block a teacher from connecting.

  1. 1. Mark the OAuth Client as Trusted

    Admin consoleSecurityAccess and data controlAPI controlsManage third-party app access

    Add an app by OAuth client ID, paste the client ID above, and set it to Trusted for the organizational units your teachers are in.

  2. 2. Allow the Classroom API

    Admin consoleAppsGoogle WorkspaceClassroomData access

    Set "Classroom API" so users in those organizational units can authorize apps to access their Classroom data. If this is off, a teacher sees an error from Google when they try to connect.

Disconnecting

A teacher disconnects from their Classla course settings, or revokes Classla in their Google account. Either one removes Classla's access. Assignments already posted in Classroom stay there until the teacher deletes them in Classroom.

Google API Services User Data Policy

Classla's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The same facts, alongside every other service Classla uses, are in the Privacy Policy.

Questions, a data privacy agreement to sign, or the client ID before it is posted here: write to camden@classla.org. Camden answers this himself.