Provider OAuth

OAuth lets yggy access the provider data that you approve without asking for your provider password. Without a connected provider, you must first download the content or use another import method.

When the connection is complete, you can browse the provider where it is available in yggy and import the content you select. This guide applies to the personal connections: Google Drive, OneDrive / SharePoint, Gmail, Outlook, Google Calendar, Slack, Notion, and your own Linear account. Each of those connections belongs to the member who approved it. The Linear workspace connection is set up by an owner or admin; see Linear.

flowchart LR
    A[Open Data Sources] --> B[Select a provider]
    B --> C[Sign in to the provider]
    C --> D[Approve access]
    D --> E[Return to yggy]
    E --> F[Connection is installed]
    F --> G[Browse and import selected content]

Before you connect

Open Data Sources → Available. Every provider your deployment supports is listed. If a provider shows Needs setup by an admin, no OAuth app has been connected for it yet. Ask an organization owner or admin to set it up, as described below.

Availability

yggy does not start a connection that cannot finish. A provider without an OAuth app stays in the list, but it cannot be connected until an administrator sets one up.

Set up a provider with your own OAuth app

Owners and admins can connect an OAuth app that your organization controls. You need this when yggy has no shared app for a provider. You can also use it for a provider that already works, for example when your security policy requires apps your organization owns. After setup, members connect as usual.

Open Data Sources → Available.
Next to the provider, choose Set up. If the provider already works, choose Use your own app instead.
Copy the Redirect URI from the dialog and add it, exactly as shown, to an OAuth app you register with the provider. The dialog links to the provider’s instructions.
Enter the Client ID and Client secret from that app and choose Save credentials.

The client secret is stored encrypted and is never shown again. To change anything about an existing app, enter the secret again.

To replace or remove your app later, choose Manage your app. Connections made with the previous app stop working and their owners have to reconnect. The dialog shows how many connections are affected before you confirm. If yggy has a default app for the provider, members use it again after you remove yours.

Connect a provider

Open Data Sources → Available.
Select the provider you want to connect.
Sign in on the provider page, if it asks you to sign in.
Review the access request.
Approve the access request.
Return to yggy.
Confirm that the provider appears as connected in Data Sources → Installed.

If your browser blocks a popup, yggy continues the authorization in the current tab.

Example: connect Google Drive. Then open Sources → New → Upload file, choose Google Drive, and import Q3-invoices.xlsx. The connection stays with the member who approved it. The file stays in Drive until you import it.

What yggy can access

Read the provider consent page before you approve it. Drive connections use read-only file access to browse and import the files you select. Mail connections use the access needed to read the messages you select for import. Google Calendar asks for read-only calendar access only. Slack reads the channels and direct messages you are in, and Notion reads only the pages you choose on its consent screen.

yggy stores a separate connection for each member. Other members cannot use your personal connections. Organization-scoped providers can have different access and approval rules; see the guide for that provider before connecting it.

Reconnect or disconnect

Reconnect when the provider revoked the connection, the access request changed, or yggy shows that the connection needs attention. Complete the same authorization flow again and confirm that the new connection is installed.

Disconnect when you no longer want yggy to access the provider. Open Data Sources → Installed, select the connection, and choose Disconnect. Disconnecting removes the stored provider credentials and connection. It does not delete files or graph data that you imported earlier.

Use a provider-specific guide when you need steps for a particular source: