[User Feedback] Support for Delegated Shared Inboxes

[martgil]

A user referenced below is looking for a way to view encrypted messages in delegated shared inboxes in Gmail.

I conducted an initial investigation, and it appears this may not be possible. When setting up the FlowCrypt browser extension, it requires logging into the account in order to grant access. However, this isn't feasible without logging directly into the account that has delegated access, which defeats the purpose of a shared inbox—since it would involve giving direct access to the primary Google account.

I believe the closest alternative to a delegated shared inbox is setting up an email alias in Gmail and granting mailbox access to a user through delegation.

EDIT: adding an email alias + mailbox is also not as ideal as the delegated shared inbox as it requires logging in the Gmail/Google account as well.

Reference: https://mail.google.com/mail/u/human@flowcrypt.com/#inbox/FMfcgzQbdrXLGKGdcClrWnfBzPwmLFDt

[martgil]

It seems safe to conclude that the FlowCrypt browser extension won't be able to support delegated shared inboxes without requiring a login to the account.

@sosnovsky Do you agree with this assessment?

[sosnovsky]

I found similar report in Google issue tracker - https://issuetracker.google.com/issues/36760064
There they respond that API access for delegated accounts is possible only with enabled domain wide delegation in Workspace settings (https://support.google.com/a/answer/162106). In this case FlowCrypt app will have access to all Workspace users' data without requiring their consent, which likely won't be acceptable by customers' security measures.

It seems safe to conclude that the FlowCrypt browser extension won't be able to support delegated shared inboxes without requiring a login to the account.

So this conclusion is correct, for now there is no possibility for us to support delegated inbox without account login.