Managing Third-Party App Integrations (Google Workspace, Box, and Zoom)

To enhance productivity, many third-party applications and services offer the ability to connect directly to your St. Edward's University accounts. Examples include linking a scheduling tool between Zoom and your Google Calendar, apps that can generate graphics in Google Drive, or adding an AI transcription bot to Zoom.

While these integrations can be helpful, they require careful management. Apps often request broad permissions (such as reading, editing, or deleting files and emails). To protect university data and your own privacy, the Office of Institutional Effectiveness & Technology (IET) recommends regularly auditing your connected apps and removing access for tools you no longer use. 

What about Sign in with Google? 

When reviewing your Google integrations, you will likely see many services/applications where you simply used "Sign in with Google" to create an account. If an app only has access to your basic account info (name, email address, and profile picture) for login purposes, this is a standard Single Sign-On (SSO) practice and is generally safe. Your primary concern during this audit should be applications that request deeper permissions, such as the ability to read, edit, or delete your emails, Drive files, or calendar events. 

Why You Should Audit Your Integrations

  1. Prevent Silent Data Access: Apps retain access to your account until you explicitly revoke it, even if you stop using the service or delete the app from your phone.
  2. Limit Breach Vulnerabilities: If a third-party app suffers a security breach, hackers can use its active connection to your account as a backdoor, bypassing your SEU password and MFA authentication.
  3. Stop Unwanted Meeting Bots: AI note-takers (e.g., Read.ai, Otter.ai) often use calendar and Zoom integrations to automatically join meetings and record conversations.
  4. Malicious Integrations: Some integrations may appear to be legitimate, but are created by attackers to gain access to your data/account.

When connecting third-party applications to your St. Edward's accounts, it is essential to ensure these tools comply with university guidelines, including the Acceptable Use Policy and the Acceptable Use of AI Policy. Integrations that involve storing, processing, or sharing institutional data (especially new software or AI-driven tools) often require formal review. Before authorizing applications with broad data access, please note that certain tools and integrations must go through the university's Technology Selection Policy to ensure they meet SEU's security, privacy, and compliance standards. 

How to Audit and Remove Connected Apps

Please follow the steps below to review the active integrations on your primary St. Edward's accounts.

1. Google Workspace (Gmail, Drive, Calendar)

  1. Open your web browser and navigate to the Google Connections page: myaccount.google.com/connections.
  2. Check your profile picture in the top right corner to ensure you are logged into your @stedwards.edu account (and not a personal Gmail account).
  3. Scroll through the list of connected apps and services.
  4. Click on any app to view its specific permissions (e.g., "See, edit, create, and delete all your Google Drive files").
  5. To remove an app, click the Delete all connections button and confirm your choice in the pop-up window.

2. Box

  1. Log in to your SEU Box account via a web browser at stedwards.box.com.
  2. Click your profile icon or initials in the top right corner and select Account Settings.
  3. Navigate to the Integrations tab.
  4. Scroll down to the Linked Apps section to see all the third-party applications connected to your Box account.
  5. Review the list. If you see an app you no longer need or don't recognize, click Disconnect next to the app's name to revoke its access to your files.

3. Zoom

  1. Log in to the Zoom via your browser at stedwards.zoom.us
  2. Once logged in, go to https://marketplace.zoom.us/user/installed
  3. You will see a list of all applications currently authorized to interact with your Zoom account and meetings.
  4. To revoke access, click the Remove (under Actions) button next to the app.
  5. Note: You may be asked to provide a reason for removal. You can select "No longer need this app" and click Remove to finalize.

Please note that some applications have been integrated across our account (e.g. LTI Pro, which allows for Zoom to integrate with Canvas). If an app is listed as “Not Authorized,” it has not been approved for use within our Zoom instance. 

Need Help?

If you discover a suspicious integration, are unsure if an app is safe to use, or need assistance securing your account, submit a ticket!

Was this helpful?
0 reviews