Setup Server-Side Signatures

Prerequisites

Before starting, ensure you have:

• A Google Workspace Super Admin account.

• Your Google Customer ID (Admin Console → Account → Account Settings → Profile).

• The following details ready to provide to Crossware Support:

  • Company name (e.g. Crossware Limited)

  • Primary domain or all domains if you use more than one (e.g. crosswaredemo.com)

  • Admin email (ideally a Global Admin, e.g. admin@crosswaredemo.com)

Configure Domain-wide Delegation

1. Sign in at admin.google.com.

2. Go to Security → Access and Data Control → API Controls.

3. Select Manage Domain-wide Delegation → Add New.

4. Enter Crossware’s client ID: 114734196798062831722

5. Add the following API scopes:

   • https://www.googleapis.com/auth/admin.directory.group.readonly

   • https://www.googleapis.com/auth/admin.directory.domain.readonly

   • https://www.googleapis.com/auth/admin.directory.user.readonly

   • https://www.googleapis.com/auth/admin.directory.customer.readonly

6. Click Authorise.

Allow Third-party App Access

1. In API Controls, go to Manage App Access.

2. Click Configure New App.

3. Enter this client ID:
   928646364906-vjarqcqr254p29bs28n24e5fjabivvev.apps.googleusercontent.com

4. Search for Crossware Mail Signature and select it.

5. Select All users and click Continue.

6. Set the app access to Limited and click Continue.

6. Click Finish.

Create User and Admin Groups

1. From the Directory menu, choose Groups.

2. Create a group named CrosswareMailSignatureUsers.

   1. Assign an email address.

   2. Add a description.

   3. Set an owner (preferably a Super Admin).

3. Click CREATE GROUP.

4. Create another group named CrosswareMailSignatureAdmins.

   1. Assign an email address.

   2. Add a description.

   3. Set an owner (preferably a Super Admin).

   4. Tick Security as Group label.

4. Select Only invited users.

5. Click CREATE GROUP.

Configure Routing Host

1. Go to Apps → Google Workspace → Gmail → Hosts.

2. Click Add Route.

3. Enter the following:

   1. Host name: CrosswareOutboundHost

   2. On the host name text field → Enter the smart host relevant to your region:

      Australia: gwstrafficsmtp-aus-k1.crossware.co.nz

      Canada: gwstrafficsmtp-can-k1.crossware.co.nz

      United States: gwstrafficsmtp-us-k1.crossware.co.nz

      France: gwstrafficsmtp-france.crossware.co.nz

      Europe: gwstrafficsmtp-eu-k2.crossware.co.nz

      United Arab Emirates: gwstrafficsmtp-uae-k1.crossware.co.nz

      Qatar: gwstrafficsmtp-qat-k1.crossware.co.nz

      India: gwstrafficsmtp-ind-k1.crossware.co.nz

   3. Port: 25

   4. Tick Perform MX lookup on host

4. Save your changes.

Configure Inbound Connector (SMTP Relay)

1. Navigate to Apps → Google Workspace → Gmail → Routing.

2. In SMTP Relay Service, click Configure.

3. Name the connector CrosswareInboundConnector.

4. Select Only accept mail from the specified IP addresses

5. Add the IP addresses provided for your region.

6. Select Require TLS encryption.

7. Save your changes.

Create Outbound Transport Rule

1. Navigate to Apps → Google Workspace → Gmail → Compliance → Content Compliance, click Configure.

2. Create a new rule named CrosswareTransportRule.

3. Define the Rule Scope and Criteria:

   1. Email messages to affect: select Outbound and Internal - Sending.

   2. Select If ALL of the following match the message.

   3. Expressions: Advanced content match → Full headers → Not contains text:
      x-cwesigprocessed: Y

   4. Expressions: Sender header → Not contains text:
      drive-shares-dm-noreply@google.com

4. Under Route, choose Change the route → CrosswareOutboundHost.

5. Enable Require secure transport (TLS).

6. In the Account types to affect section, select both Users and Groups.

7. In Envelope filter, select Only affect specific envelope senders.

8. Choose Group membership (only sent mail), then select CrosswareMailSignatureUsers.

9. Save your changes.

Completion

Once the above steps are completed, log in to the Crossware Email Signature Portal to design and manage your signatures.