How to create Google service account to enable push notifications

You will learn

Learn how to set up your Google service account and enable Firebase Cloud Messaging so you can send Klaviyo push notifications to Android devices.

Before you begin

Before following the steps below, you must have an existing Firebase project for your Android app. Use the same project throughout this setup.

You need Google Cloud permissions to enable APIs, create custom roles and service accounts, assign the role to the service account, and create service account keys. If you cannot complete these actions, ask your Google Cloud administrator for access or help with setup.

Enable the Firebase Cloud Messaging API

1. Navigate to the Google Cloud console.
2. Select your Firebase project from the dropdown in the top left corner.
3. Search for "Firebase Cloud Messaging API".
4. Select Firebase Cloud Messaging API from the marketplace list.
   

5. Click Enable to enable the API for your project. If the API is already enabled, continue to the next section.

Create a custom role that supports message creation

1. From the Google Cloud console dashboard, select IAM & Admin under the Quick Access section.
   

2. In the left menu, navigate to the Roles section.
   

3. Click Create custom role.

4. Enter a Title, Description, ID, and Role launch stage for the role. The ID cannot be changed after the role is created.

5. Click Add Permissions.
6. Add only the cloudmessaging.messages.create permission. (For more details, see Google’s instructions for creating a custom role.)
   

7. Click Add Permissions to add the selected permission to the role.
8. When ready, create the role by selecting Create.

Create a Google service account

1. In the left side menu of the IAM & Admin section, navigate to the Service Accounts tab.
2. Click Create service account.

3. Fill out the Service account name and Service account description (optional) fields.
   

4. Click Create and continue.
5. Click into the Select a role field.
   

6. Select the custom role that you just created. Here, we choose “Test Role,” but select the role you created in the previous section.
7. Click Continue. Leave the optional service account user and admin access fields blank, then click Done to finish creating the service account.

Generate a service account key

1. In the Service Accounts page, click on the email address for the service account that you created in the previous section.
   

2. Navigate to the Keys tab.
3. Click Add Key.
4. Click Create new key.
   

5. Under Key type, select JSON.
   

6. Click Create to download the service account key file.

Store the downloaded file securely where you can find it when setting up Android push notifications in Klaviyo. You cannot download this key file again. The JSON below shows an example of the file’s format; upload the file Google downloads, using your actual credentials.

{ "type": "service_account",
"project_id": "PROJECT_ID",
"private_key_id": "KEY_ID",
"private_key": "-----BEGIN PRIVATE KEY-----\nPRIVATE_KEY\n-----END PRIVATE KEY-----\n",
"client_email": "SERVICE_ACCOUNT_EMAIL",
"client_id": "CLIENT_ID",
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
"token_uri": "https://accounts.google.com/o/oauth2/token",
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/SERVICE_ACCOUNT_EMAIL" }

Outcome

Your Google service account now has the messaging role and a downloaded JSON key. Continue with setting up Android push notifications in Klaviyo to upload the key and complete the connection.

Additional resources