Skip to content

Google Analytics 4

This Integration requires Fides Cloud or Fides Enterprise. For more information, talk to our solutions team. (opens in a new tab)

Google Analytics 4 (opens in a new tab) is a web analytics service that helps companies track and analyze website performance and user behavior.

Prerequisites

There are two ways of authenticating to Google Analytics 4: using OAuth2 or using a Google Service Account.

OAuth2 Authentication

OAuth 2.0 must be configured ahead of time to authorize requests against this service. To learn more follow this guide from Google Analytics (opens in a new tab).

In order to integrate with Google Analytics 4 using OAuth 2, you must complete the following steps:

Once you have this configured, you'll need to collect the following information:

NameDescription
Client ID*The OAuth 2.0 client ID for your application. See Google docs for creating OAuth client ID credentials (opens in a new tab)
Client secret*The OAuth 2.0 client secret. See Google docs for creating OAuth client ID credentials (opens in a new tab)
Redirect URL*The Fides URL to which users will be redirected upon successful authentication (ex. https://fides-host.com/oauth/callback)
Property ID*Your GA4 Property ID. See Google's guide on Property ID's (opens in a new tab).

Google Service Account Authentication

A Google Service Account must be configured ahead of time with the appropriate permissions. To learn more follow this guide on creating service accounts (opens in a new tab).

In order to integrate with Google Analytics 4 using a Google Service Account, you'll need to extract the following information from your service account JSON key file (opens in a new tab):

NameDescription
Property ID*Your GA4 Property ID. See Google's guide on Property ID's (opens in a new tab).
Project ID*Your Google Cloud project ID from the JSON key file.
Service Account Email*The service account email from the JSON key file (e.g., my-sa@my-project.iam.gserviceaccount.com).
Private Key*The RSA private key from the JSON key file (begins with -----BEGIN PRIVATE KEY-----).

Integrating with Google Analytics

To integrate an existing system with Google Analytics:

  1. Navigate to Data mapView Systems and choose the system that you want to connect.
  2. Click on the Integrations tab.
  3. Pick the vendor or system type that you want to integrate with from the Connection type drop-down menu.
  4. Complete the required fields for the integration and click Save.

To authorize the integration so that it can connect to Google:

  1. Click on Authorize integration to be redirected to the Google authorization screen
  2. Enter your credentials and click Log in. You will automatically be redirected back to the Fides UI using the Redirect URL that was provided in the form in the previous step.

You may now confirm your connection is working using the Test connection button, if desired.

To learn more, please see our guide for Managing Integrations.

Technical detail

Fides utilizes API endpoints to access the API service for a SaaS application. An API service is the programmatic interface through which Fides can query and update data within an application to access, rectify, or delete personal information. Each SaaS tool will have a unique set of endpoints to enable privacy functions.

Google Analytics Endpoints

In the table below, you can find which endpoints are used for each type of privacy function. Clicking on the endpoint will take you to the documentation for that endpoint.

Privacy functionEndpointDescription
Consent RequestsUser Deletion Request (opens in a new tab)Used to delete the user from Google Analytics upon opt-out