Google business profile oauth setup is the step that scares most WordPress users away from automation. It looks like a five tab maze. In practice it is ten minutes if you follow the right order. This walkthrough sticks to the order.
Create a Google Cloud project
Go to console.cloud.google.com. Create a new project named after your business. Pick the project. Open the API library.
Enable My Business Account Management API, My Business Business Information API, and My Business API v4. Three clicks each.
Configure the OAuth consent screen
Pick External user type. Fill the required fields: app name, support email, developer email. Skip the scopes screen for now. Add yourself as a test user.
You do not need verification to use the project for your own business. Test mode is sufficient.
Create OAuth client credentials
Credentials, Create Credentials, OAuth client ID. Application type: Web application. Add your WordPress site URL to authorised origins and the plugin callback URL to authorised redirect URIs.
Save and download the JSON. Or copy the client ID and secret to the next step.
Paste into WordPress
GMB Poster has a setup wizard that takes the client ID and secret you just copied. Paste them in, click Authorise, sign in with the Google account that owns your Business Profile, and pick the location.
the GMB Poster plugin stores both credentials encrypted using your site AUTH_KEY. Nothing leaves your server.
Test with a sample post
Publish a draft post or hit Publish Now on an existing item in the plugin queue. Within a minute the post should appear on your Google Business Profile.
If it fails, the queue row shows the Google API error so you can fix and retry.
Frequently asked questions
Does google business profile oauth setup cost anything?
No. Google Cloud free tier covers everything needed for this use case.
Why per install OAuth credentials?
Shared secrets across many sites violate Google ToS and create a single point of failure. Per install is the secure model.
What if my consent screen says unverified app?
Test mode users see this warning but can still authorise. You only need verification for a public multi user app.
Will the OAuth token expire?
Access tokens refresh automatically using the refresh token. No manual reauth needed.
Related reading
- Automate WordPress to GBP
- Why publish WordPress posts to GBP
- GMB Poster on WordPress.org – the plugin powering these workflows.
