Classla and Google Classroom for Workspace Admins
A teacher at your school wants to connect Classla to Google Classroom. This page says what that connection does, what it asks for, and what you need to allow it. It is short because the integration is small.
For Google Workspace admins
What It Does
When a teacher publishes an assignment in Classla, Classla creates one assignment in the linked Google Classroom course so students see it in their Classroom stream and calendar. When the teacher renames it, changes the due date, or unpublishes it, Classla updates or removes the Classroom item. That is the whole feature. It is one way, from Classla to Classroom.
What Classla Posts
- The assignment title.
- The due date, when the assignment has one.
- A message the teacher writes and can edit before it posts.
- A link back to the assignment in Classla.
- The name of a Classroom topic, taken from the assignment's main tag in Classla.
The Classroom assignment is created ungraded. The only thing attached is one link back to the assignment in Classla. No files are attached and students submit nothing in Classroom.
What Classla Reads
The connected teacher's list of Classroom courses, so the teacher can choose which one a Classla course links to. In a course the teacher has linked, Classla also reads that course's topics, and the assignments Classla itself posted there, so it can keep them up to date. It reads nothing else.
What Classla Stores
- An encrypted refresh token for the connected teacher's Google account.
- The Google account id and display name of the connected teacher.
- The Classroom course id each linked Classla course or section points at.
- The Classroom coursework id of each assignment Classla has posted.
What It Does Not Do
- It sends no student data to Google. No names, no usernames, no work, no scores.
- It does not read rosters, student profiles, or grades.
- Grades do not push to Classroom.
- Students never sign in to Google through Classla. Only teachers connect.
OAuth Scopes
Classla requests exactly three Classroom scopes, plus the basic sign-in scopes (openid and profile) that give the connected teacher's Google account id and name. The three Classroom scopes are Google "sensitive" scopes, not "restricted" ones.
https://www.googleapis.com/auth/classroom.courses.readonly- To list the Classroom courses the connected teacher teaches, so they can pick which one a Classla course links to.
https://www.googleapis.com/auth/classroom.coursework.students- To create, update, and delete the assignment Classla posts in that Classroom course.
https://www.googleapis.com/auth/classroom.topics- To read and create topics in the linked Classroom course, so an assignment's topic follows its main tag in Classla.
OAuth Client ID
This is what you add in the Admin console to mark Classla as Trusted.
Client ID: available on request. Email camden@classla.org and it comes back the same day.
How to Allow It
Two settings, both in the Google Admin console. Either one being off is enough to block a teacher from connecting.
1. Mark the OAuth Client as Trusted
Admin consoleSecurityAccess and data controlAPI controlsManage third-party app access
Add an app by OAuth client ID, paste the client ID above, and set it to Trusted for the organizational units your teachers are in.
2. Allow the Classroom API
Admin consoleAppsGoogle WorkspaceClassroomData access
Set "Classroom API" so users in those organizational units can authorize apps to access their Classroom data. If this is off, a teacher sees an error from Google when they try to connect.
Disconnecting
A teacher disconnects from their Classla course settings, or revokes Classla in their Google account. Either one removes Classla's access. Assignments already posted in Classroom stay there until the teacher deletes them in Classroom.
Google API Services User Data Policy
Classla's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
The same facts, alongside every other service Classla uses, are in the Privacy Policy.
Questions, a data privacy agreement to sign, or the client ID before it is posted here: write to camden@classla.org. Camden answers this himself.