Some apps require email verification (e.g. magic links or codes) during provisioning. By connecting a Gmail or Outlook inbox, Agent Cake can automatically complete these flows when provisioning users.
Admin connects a Gmail or Outlook inbox in Account Settings → Auto-Provisioning.
Apps that require email verification can then be linked to this inbox.
When provisioning runs, Agent Cake checks the inbox for verification emails and follows the magic link or code.
Admins can monitor connection status, reconnect failed inboxes, or reassign apps to another inbox at any time.
Go to Settings → Account → Auto Provisioning.
Click Connect Inbox.
Select a provider (Gmail or Outlook).
Authenticate with an account that has the right permissions (service account recommended).
On success → inbox is added with an Active badge.
On failure → inbox shows a Failed badge with a reconnect option.
Google Workspace Users: If you're using Gmail with Google Workspace, you may need to whitelist the Cakewalk Gmail integration before you can connect your inbox. This requires admin permissions in the Google Admin portal:
In the left menu, go to Security → Access and data control → API controls
In the App access control section, click Manage app access
Click Configure new app
Add 876594835759-1uoinah2ipdjinkhoqho9tugi6bd0a5l.apps.googleusercontent.com in the Search for app input and click Search
Click Cakewalk Email Verification
Click Continue
Select Trusted and click Continue
Click Finish
Inbox appears in settings showing:
Email address
Connection status (Active, Failed)
Apps linked
Actions: Reconnect | Delete
Warning: Deleting an inbox will remove all linked auto provisioning configurations, reverting the affected apps to manual provisioning.
Go to App Governance → Select app → Provisioning → Agent Cake.
App setup shows a connected inbox already preselected (email + status).
Option to add an alias email address below used for third-party app account (e.g. provisioning+cursor@company.com)
Saved configuration displays the connected inbox in summary view.
Cakewalk only ever reads emails from the specific inbox you connect. No other mailboxes are accessed.
Only verification-related emails are processed. Regular messages, personal content and other inbox data are never read or stored.
All data is encrypted in transit and at rest, following industry standards.
Badges: Inboxes show Active or Failed if the connection is no longer valid.
Reconnect reminders: When a connection fails, admins are notified via Email and Slack with a direct prompt to reconnect.
Error handling: Inline error messages in the inbox configuration guide you to reauthenticate or switch providers.
Use a dedicated service account instead of a personal inbox to keep data fully separate.
Dedicated service accounts are also recommended to maintain auto provisioning workflows, ensuring continuity even if Admins or App Owners leave.
Reconnect failed inboxes promptly to avoid provisioning delays.
Last updated
Was this helpful?
Was this helpful?
