New Booking Links are now available to everyone 

Guides

Approve Don't Double Book Me in Google Workspace

To approve Don't Double Book Me, mark it as a trusted app in the Google Admin console. Go to Security, Access and data control, API controls, open Manage Third-Party App Access, add the app by its OAuth client ID, and choose Trusted. The app only requests access to each signed-in user's own calendars and email address. It takes about five minutes.

Not an admin? Read what to do when Google says "Access blocked" instead.

What Don't Double Book Me Does

Don't Double Book Me keeps a person's calendars in sync so they don't get double booked. When an event is added to one calendar, a matching busy block is created on the other. It works across Google Calendar and Microsoft Outlook, and it's used by people who juggle a work calendar and a personal one.

A few things worth knowing before you review the scopes:

  • Each user connects their own account. The app uses standard OAuth sign-in and acts as the signed-in user. It doesn't use domain-wide delegation or a service account, so it can't reach anyone else's calendar.
  • No event details are stored. Events are synced directly between calendars. OAuth tokens are encrypted at rest with AES-GCM.
  • Privacy controls are built in. Synced events can be written as "Busy" with no title or description, so work details never leave the work calendar.

Scopes Requested

These are the Google OAuth scopes users see on the consent screen and why each one is needed.

Scope Shown to users as Why it's needed
calendar.events View and edit events on all your calendars Read the user's events and create, update, or remove the busy blocks it syncs.
calendar.readonly See and download any calendar you can access using your Google Calendar List the user's calendars so they can pick which ones to sync.
userinfo.email See your primary Google Account email address Identify the account by email so the user can tell their connections apart.
openid Associate you with your personal info on Google Standard sign-in scope.

Mark the App as Trusted

You'll need the Service Settings admin privilege, which super admins have. Copy the app's OAuth client ID first:

185041304191-a9vvigiq03d1bfk5stq9s86ml2cq4tu4.apps.googleusercontent.com
  1. Sign in to the Google Admin console.

  2. Go to Security › Access and data control › API controls, and select Manage Third-Party App Access.

  3. Next to Configured apps, select View list, then Add app › OAuth App Name or Client ID.

  4. Paste the client ID, select Search, and select Don't Double Book Me. Check its client ID and select Select.

  5. Choose who it applies to: your whole organization, or specific organizational units or groups.

  6. Choose Trusted and select Configure.

    If Calendar is set to Restricted under Google services, only Trusted apps can use it. Limited access isn't enough.

Already see Don't Double Book Me under Accessed apps because someone tried to sign in? Point to it, select Change access, choose Trusted, and select Change.

After You Approve

The person who asked can go back to Don't Double Book Me, choose Sign up with Google or Add Google Calendar account again, and sign in. Google can take a little while to apply the change, so if they're still blocked, have them wait a few minutes and try again. Each user still connects their own account, so nothing is synced until they set it up.

To revoke access later, change the app's access to Blocked under Manage Third-Party App Access. Users can also disconnect their own account from within Don't Double Book Me, or remove it from their Google Account's third-party connections, at any time.

Questions?

If your security review needs anything else, such as details about how tokens are handled or a copy of our privacy policy, contact us and we'll get back to you quickly.