Google 2-step verification failing in 10.10.3 'Internet Accounts'

Does anybody figured out how to configure Messages app to work with GApps account with enabled 2factor authentication?

until now I am still waiting for a solution.. I thought nobody's using messages but me only... well I don't think there's a solution sooner as nobody is interested with Messages... it's just so buggy!

Hi JJ,

Got exactly the same problem as yourself 😟

I haven't been able to access my account for nearly 3 weeks!

For Google Apps mail account to work, you need to activate the 2 step verification, otherwise it won't

The problem here is that our organization do not support Google+ accounts. Hence they will not be able to support the google+ apis for sure. So this leaves only the app specific password as an option. The problem with that is I can only configure mail, but not mail + calendar using the other account option. Apple needs to fix this - using google authentication should not have a dependency on google+ apis.

I ran into this week and came up with a workaround that allows you to use an application password. After generating one follow the steps below:

1. Hit Command-Space and type "terminal" to launch a terminal
2. Run the following command substituting yourusername@yourdomain.com with your google apps email and yourapppassword with the application password you generated (note that "htps" is not a type-o, its a 4 digit code)

   security add-internet-password -a yourusername@yourdomain.com -p /calendar/dav/yourusername@yourdomain.com /user/ -r htps -s calendar.google.com -w yourapppassword

3. Hit Command-Space type keychain to launch the keychain tool
4. In the search box on the upper right corner type "calendar", and sort the results by modified time
5. Right click the "calendar.google.com" entry you created in the login keychain, and pick [Copy “calendar.google.com”]
6. Click the iCloud keychain in the far left frame of the app, right click any entry on the iCloud list and pick [Paste “calendar.google.com”]
7. You will be required to enter your system password to allow copying of the password entry into the iCloud keychain
8. Launch Settings and pick Internet Accounts
9. Add the account in internet accounts as a CalDav entry using the proper server address
   • Account Type = Advanced
   • Username = yourusername@yourdomain.com
   • Password = application password you previously created
   • Server Address = calendar.google.com
   • Server Path = /calendar/dav/youreusername@yourdomain.com/user/
   • Port = Blank
   • Use SSL = Checked
10. It will be created as a google account, but will pick up the keychain entry, and ical should start syncing

Great development! But how about the Messages app? Any work around to make it functional?

fyi this is still broken in 10.10.4 beta

My issue seems to be a little different to most here but, tentatively, 10.10.4 (14E26a) appears to have gotten it working again.

discoveryd related perhaps?

Thanks for the heads up about the new beta release...but it is still broken for me. This Mail update since 10.10.3 to try and support Google's 2FA doesn't take into account Google Apps accounts that use SSO that don't support 2FA and require app specific passwords for IMAP/POP/SMTP.

This happened to me today, 5/28/15.

History:

1. I use apple mail before 2-step gmail was required by my workplace.
2. Then I enabled 2-step using the web browser.
3. Apple Mail wouldn't send / receive email
4. On MacBook, Yosemite 10.10.3, Mail Version 8.2 (2098)

Fix:

1. go to: https://security.google.com/settings/u/1/security/permissions screen shot (http://screencast.com/t/fidpoHBP1)
2. click on OS X
3. click revoke, you want to revoke the token because it set to the old method w/o 2-step
4. go back to Apple Mail and try to get email
5. it should ask you to to enter the Google verification code.

This worked perfectly, thank you! Just needed to allow Google Plus API Access in Admin and all works fine now

Spent the weekend trying to figure this out and just did, (or they fixed the backend):

1 add new google account.

2 enter user name

3 enter password

4 sign in.

5 Accept agreement

6 Choose which apps you want to use for the account.

7 click done

8 As soon as you click done: ( I still get the error message: could not Authenticate...) click on your iCloud or other previously set up accounts. I had to go back to the new account I set up to add my cal and then quickly click on a past account again to get it to accept the changes.

Ive tried this with a personal & business google account with and without 2 factor.

It looks like another 10.10.4 beta (14A386B) has been released and they've reverted mail back. Mail app appears to require an app specific passwords for Gmail/Google Apps accounts again versus redirecting you to accounts.google.com and having you sign in via web for 2FA.

This has fixed the annoying issue with Google Apps and Shibboleth SSO where I kept getting invalid password prompts. Sounds like they might have reverted back because of the reported issues.

disregard...for some reason my mac installed an old version of yosemite from the app store...***...ugh lol