Gmail / Google Workspace

Connecting

1. Settings → Accounts → Add account → Gmail.
2. Sign in to Google as the mailbox owner.
3. Review the requested scopes:
   • Read, compose, send, and permanently delete all your email from Gmail - required for full inbox sync.
   • Manage your basic mail settings - used to read labels and thread metadata.
4. Click Allow. You’ll be redirected back to SuperMail.

Sync model

Gmail accounts connect over OAuth-authenticated IMAP IDLE to imap.gmail.com. While the IDLE connection is held open, new mail surfaces in SuperMail in near-real-time. If the connection drops (Google occasionally recycles long-lived IDLE sockets), we reconnect and pick up from where we left off.

Read state, archive, and delete

Read state and folder changes sync back to Gmail over IMAP. Marking a message read in SuperMail flips the \Seen flag on Gmail; archiving moves it out of INBOX; deleting moves it to [Gmail]/Trash. Changes you make in the native Gmail UI flow back the same way on the next sync.

Gmail labels are not synced as SuperMail tags. SuperMail tags live inside SuperMail only - see Tags.

Where to add a Gmail account

Gmail OAuth is wired up on the web app today. The mobile apps don’t have a Gmail OAuth flow yet (it’s planned). For now: connect Gmail on the web; once added, the account appears on your mobile apps automatically because accounts are workspace-scoped.

Workspace-specific notes

• If your organization requires admin consent, your Workspace admin needs to allow the SuperMail OAuth client in the Google Admin Console. Send them the app listing link in Settings → Accounts → Gmail after you hit the permission error.
• 2-step verification is supported (it’s handled entirely by Google - we never see the codes).

Gotchas

• Gmail filters run before we see the mail. If your filter already marks something as read or archives it, we inherit that state.
• Vacation responders still fire from Gmail’s side. Don’t configure two auto-responders.