> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.appfigures.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Linking your Google Play Developer Account

Appfigures connects to your Google Play developer account directly and securely using advanced encryption and collects everything to track downloads and revenue for your apps, in-app purchases, subscriptions, and more.

**Table of Contents**
* [Connecting Your Google Play Account](#3-connecting-your-google-play-account)
* [Creating a Sub User in the Play Console and Permissions](#3-creating-a-sub-user-in-the-play-console-and-permissions) 
* [Linking with Google Workspace (formerly known as GSuite Setup)](#3-linking-with-google-workspace-formerly-known-as-gsuite-setup)
* [Support for Google's Offline One-Time Password](#3-support-for-googles-offline-one-time-password)
* [Why Am I Seeing a Login from NYC?](#3-why-am-i-seeing-a-login-from-nyc-?)
* [Noteworthy](#3-noteworthy)
---

Linking your Google Play account will enable you to track the following with Appfigures:

* App downloads and revenue
* In-App Purchase downloads and revenue
* Subscriptions revenue, MRR, Churn, and more
* Hourly ranks
* Ratings
* Reviews
* Featured placements
---

### Connecting Your Google Play Account

||| Note: Managing linked accounts requires the `Admin` or `Owner` role. If you are a viewer, please share this article with a team member who has the required role.

1. Log in to your Appfigures Account
2. Click on your avatar (top right) and then on **"My Profile"**
3. Go to [Linked Accounts](https://appfigures.com/account/externals)
4. Click on **"Link an Account"**
5. Select *Google Play* from the list of providers
6. Enter the email address and password for your Google account
7. Click on **"Add"**

**Important:&#160;**Upon linking for the first time, Google alerts to a login from a geographic location that is different from your normal location.

We connect to your Google account from IPs based in the United States. More specifically, we have IPs in New York and Texas. As such, if you're not from New York or Texas you might see this notice in your Google account after linking us with your Google Play developer account.

To approve this notification, you must go back into your Google account follow these steps:

1. Go into the 'Recent security activity' tab of your Google account: [Notifications](https://myaccount.google.com/notifications)
2. Check if you have received 'New sign-in' from 'New York, USA` alerts from Google. If yes, open the alert and reassure Google by answering "Yes, it was me".
3. Go back to the Appfigures [Linked Accounts](https://appfigures.com/account/externals) page and re-enter the credentials for your Google account.

Appfigures will now verify your information and connect your account. You may be asked to verify with Google during this process. 

---

### Creating a Sub User in the Play Console and Permissions

To restrict access to only sales data, we recommend creating a separate Google account with limited permissions and using it instead of your main Google account.

*You'll need to have admin privileges with Google to continue with this process.*

1. Start by logging into your [Google Play Developer](https://play.google.com/apps/publish) Console. 
2. Click on **Users and permissions**
3. Select **Invite new users** 
4. Give the sub-user an email that isn't your main email, but you have access to. 
5. Set Access expiry date to **Never**
6. Next, give the new user permissions through the **Account permissions** tab:  

* App Access → View app information and download bulk reports (read-only)
* Financial access → View financial data, orders, and cancellation survey responses
* User Feedback → Reply to reviews 
  ![](https://storage.crisp.chat/users/helpdesk/website/-/1/6/f/5/16f5957f6b3a4700/appfigures-kb-screenshot_wwtmrr.png)



  **Important:** These permissions provide `read-only` access to reports, so we'll only be able to get reports and won't have the ability to manage your apps or banking information. 

7. Click on **Invite user**
8. Check your email. Google will send an email to the address you provided. Follow the instructions in the 
email to complete the setup. 
9.  Head back into your Appfigures account to complete the steps from "Connect Your Google Play account". Go to your *profile* → [Linked Accounts](https://appfigures.com/account/externals) to connect the Google Play account with the new credentials. 

|| When creating a new subaccount, Google will take about 24 to 48 hours to fully process the new account + permissions. Downloadable reports will be available once that's completed on Google's end, and importing sales reports will begin once those are detected.

---

### Linking with Google Workspace (formerly known as GSuite Setup)

If you're a part of a Workspace account, you'll need to make sure to whitelist the Appfigures app.

|| Workspace has a standard default period of 14 days. This means, unless you increase the verification window with Google, you will need to re-verify the account every two weeks.


###### Permission checks to run within Google Workspace:

Allow Workspace users to access Google Cloud Platform

1. Go to [Apps → Additional Google Services](https://admin.google.com/ac/appslist/additional)
2. Make sure that Google Cloud Platform and Google Play Console are `ON for everyone` or the accounts you would like to link to Appfigures.

With Workspace, you should ensure that Reauthentication is set to allow trusted apps:

[Google's documentation](https://support.google.com/a/answer/9368756?hl=en&sjid=1346326232468075793-NA)

1. Go to [Security → Google Cloud Session Control](https://admin.google.com/ac/security/reauth/admin-tools)
2. If `Require reauthentication` is set, also set `Exempt Trusted apps` if `Never require reauthentication` is set no changes are required. 

**Allow Apps in Google Workspace**

If your organization only allows approved Google Workspace Marketplace apps, a Google Workspace administrator must allow Appfigures before you can sync the account.

1. In the [Google Admin console](https://admin.google.com/), go to **Apps → Google Workspace Marketplace apps → Apps list**.
2. Click **Allowlist app**, search for **Appfigures**, then click **Select**.
3. Choose **Allow**, select the users who need access, then click **Finish**.

If you are prompted to install the app, open the [Google Workspace Marketplace](https://workspace.google.com/marketplace), search for **Appfigures**, select it, and click **Install**. Complete the Google permission prompts.

For more detail, see Google's instructions to [manage a Marketplace app allowlist](https://knowledge.workspace.google.com/admin/apps/manage-the-marketplace-app-allowlist-for-your-organization) and [find and install an app in the Marketplace](https://support.google.com/marketplace/answer/6067029).
---

### Support for Google's Offline One Time Password

1. Follow the steps from [Connecting your Google Play Account](#3-connecting-your-google-play-account)
2. Then, log into your Google app and click on your icon in the top right corner. ![](https://storage.crisp.chat/users/helpdesk/website/-/1/6/f/5/16f5957f6b3a4700/kevin1_1mw5066.png)
3. Click on "Manage Your Google Account". ![](https://storage.crisp.chat/users/helpdesk/website/-/1/6/f/5/16f5957f6b3a4700/appfigures-kb-screenshot-3_akwaty.png)
4. Go to your Security tab. ![](https://storage.crisp.chat/users/helpdesk/website/-/1/6/f/5/16f5957f6b3a4700/kevin3_dk7of7.png)
5. Open the section for "Security Code". ![](https://storage.crisp.chat/users/helpdesk/website/-/1/6/f/5/16f5957f6b3a4700/kevin4_17wvsk7.png)
6. Lastly, add the security code from step 4 into the prompt in Appfigures.
---

### Why Am I Seeing A Login from NYC? 

We use a sophisticated automated data importing system to bring in reports from your Google Play Developer Console. Because Google does not offer a direct API for all of the data we need to fully automate the process, we've built our own process to do that. This process emulates a browser to sync reports securely and automatically without ever exposing your credentials.

If the IP address associated with the login is `204.145.71.20` this is perfectly normal.
![](https://storage.crisp.chat/users/helpdesk/website/-/1/6/f/5/16f5957f6b3a4700/appfigures-kb-screenshot-1_sh63s0.png)

This process is completely automated, secure, and is only used to sync data reports from your Google Developer Console. No other areas of your Google account (like your Gmail account) are ever accessed.

Even though this is a perfectly normal and secure process, in some cases, it triggers Google's anti-fraud measures when syncing for the first time, particularly for Google accounts based outside of New York and the United States. This should only happen once. As we continue to sync your account, Google learns and will not alert you again.
---

### Noteworthy

**SSO Systems Supported When Connecting to Google's Developer Account:** 
* Okta
* OneLogin
* Entra ID (Azure)
* JumpCloud

While these four systems are supported fully, any other SSO system *should* work out of the box as well.