Issue

Error 400: admin_policy_enforced is returned when connecting a brand account to TubeSpanner.


Solution

The error message when trying to sign in must show third-party client ID; this ID needs to be added to the Admin console Allow list:
  1. Go to your Admin console at admin.google.com.
  2. Open Security > Access and data control > API controls.
  3. Select Manage third party apps access.
  4. Click Add app and then OAuth App Name Or Client ID.
  5. Enter the client ID and click Search.
    • Make sure there are no spaces at the end or the beginning.
  6. Select the app that you found in the result.
  7. Checkmark the box and then click Select again.
  8. Make sure to select Trusted: Can access all Google Services and then select Configure. 
Once these steps are followed, you can try again immediately; however, it may take up to 24 hours for the changes to propagate.


Cause

The third-party client needs to be allowed in the Admin console.