How to Create a Google Passport

The "Passport" in Comeen refers to a dedicated Google account that will be used to access and broadcast specific dashboards, such as Looker Studio.

This article provides step-by-step instructions to create and configure this Google account.

Prerequisites

• Access to the Google Admin Console

Step 1: Create a Dedicated Google Account

1. Navigate to Directory > Users, and click on "Add new user".

2. Fill in the required information and click "Add new user".

3. Copy and securely save the password.

Step 2: Configure the Google Account

1. Visit Google Account Settings and log in with your dedicated Google account.
2. Navigate to Security.
3. Under "How you sign in to Google", click on "Authenticator"
4. Click "Set up authenticator"
5. Select "Can't scan it" to obtain the Secret OTP Key.
6. Copy the Secret OTP Key. 
   ⚠️ Important: Copy the Secret OTP Key without closing the popup (closing it generates a new Secret OTP Key).
   
   
   ℹ️ Information: Save this key securely as it is needed to create your Passport on Comeen.

   

7. Download Google Authenticator app from the Google Play Store or the iOS App Store.
8. Open the app, click the "+" icon at the bottom right, and select "Scan a QR Code"
9. Scan the QR Code displayed in your browser
10. Back in your browser, click on "Next".
11. Enter the code displayed in the Google Authenticator app, then click "Verify"
12. Return to the "Security" tab in your Google Account settings.
13. Under "How you sign in to Google", click "2-Step Verification"
14. Click "Turn on 2-Step Verification", then click "Done"
15. Under "How you sign in to Google", locate "Skip password when possible" and ensure this feature is disabled.

Step 3: Create the Passport in Comeen

2. Go to the Passport tab and click "+ Passports"

• Passport Title: Enter a name for your Passport.
• Username: Email address of the dedicated Google account.
• Password: Password of the dedicated Google account.
• Secret OTP: The Secret OTP Key saved earlier in step 2.6.
• Access Rights: Select the users in your space who should have access to this Passport.

Step 4: Enable your Passport

At this stage, you can start creating dashboards on Comeen. However, to synchronize and broadcast them, your Passport must be activated.

This activation requires manual action from our team. Please contact our support via the live chat icon in the bottom right corner of your space or by email at support@comeen.com.

Security and Confidentiality of User Credentials

As part of our service for broadcasting authenticated dashboards, we handle sensitive information such as email addresses, passwords, and the OTP (One-Time Password) secret key. The security of this data is our top priority. Below are the measures we implement to ensure their protection:

1. Encryption of Credentials

All credentials (email, password, and OTP key) provided by the user are encrypted before storage using the AES-256 algorithm, ensuring the confidentiality and integrity of the data.

2. Secure Data Storage

Encrypted credentials are stored in a database that is itself encrypted at rest with AES-256, providing a double layer of protection to ensure optimal data security.

3. Isolation and Protection of Credentials

• Credentials never leave our servers and are never exposed to third parties.
• We never share this information publicly, including on screens displaying dashboards.
• Access to credentials is strictly limited to internal processes required for authentication and updating user sessions.

4. Secure Transmission

All communications between our servers involving user credentials are encrypted with AES-256-GCM, ensuring the integrity and confidentiality of the data during transmission.

5. Protection Against Leaks and Attacks

We adhere to cybersecurity best practices to safeguard credentials:

• Implementation of strict access controls to databases.
• Regular monitoring and audits to detect any suspicious activity.

Troubleshooting

Passport connection failed

1. Open this URL in incognito mode or in a new browser window to access the Google sign-in page: https://accounts.google.com/

2. Enter the dedicated account's email address. Make sure to use the same email address you used to create your Passport on Comeen, then click Next.

3. Enter the dedicated account's password. Ensure it matches the password used to create your Passport on Comeen, then click Next.

4. Click "Try another way".

5. You should see the option: "Get a verification code from the Google Authenticator app".

If Issues Occur:

• Step 2 or 3 Failure:
  If you’re unable to log in, the credentials (email or password) are incorrect.

• Step 5 Failure:
  If you don’t see the option "Get a verification code from the Google Authenticator app," it likely means the Google Authenticator configuration was not completed in Step 2 of the setup process.

Following these steps will ensure your Passport (Google account) is properly configured for use within Comeen, allowing for seamless access to and broadcasting of your authenticated dashboards.