If Google shows Access blocked: Clarify is not approved by Advanced Protection, with Error 400: policy_enforced, Google is refusing the sign-in before it reaches Clarify. A Google Workspace administrator clears this by marking Clarify as a trusted app. Nothing needs to change inside Clarify.
ℹ️ This blocks signing in, not only connecting your mailbox. Clarify asks for Gmail and Calendar access as part of the Google sign-in, so Advanced Protection stops the sign-in itself.
The fastest fix
An administrator for your Google Workspace domain needs to do this once:
Open the Google Admin console and go to Security → Access and data control → API controls
Open Manage App Access
Enter the app name or Clarify's client ID, then click Search. Clarify's client ID is 874162950931-qqev9be7h4f3rk6j806loie2phnd2ut0.apps.googleusercontent.com
Select the organizational units that should have access
Set the access level to Trusted
Trusted lets an app reach both restricted and unrestricted Google services. Limited is not enough here, because Clarify needs scopes Google classes as restricted.
Marking Clarify as Trusted lets people sign in and connect their accounts. It does not connect anyone's email or calendar on its own - each person still connects their own account from Connectors in Clarify.
Why this happens
Clarify signs you in with Google and reads your email and calendar through the same Google app, so the sign-in asks for Gmail and Calendar access up front.
Google classes those as high-risk scopes. The Advanced Protection Program blocks apps that need high-risk scopes unless an administrator has explicitly trusted them, or unless they sit on Google's short default list of trusted apps. That is why the block lands at sign-in, and why it can appear for someone who has signed in to Clarify before - the account only has to join Advanced Protection after that last sign-in.
Personal Google accounts
If the account is a personal Google account rather than a managed Google Workspace account, there is no administrator who can allow the app. The only route is to leave the Advanced Protection Program at myaccount.google.com, which removes the program's protections from the whole account.
Check whether it worked
Sign in again at app.clarify.ai. If the same screen appears, confirm in the Admin console that Clarify is set to Trusted for the organizational unit that person belongs to, not only for the top-level organization.
Error reference
Access blocked: Clarify is not approved by Advanced Protection - Error 400: policy_enforced. The Google account is enrolled in the Advanced Protection Program. Use the steps above.
Still blocked?
Contact support at [email protected] with the affected email address, your workspace name, and a screenshot of the Google error screen.
Where to go next
→ Connecting Microsoft 365 - admin consent troubleshooting - the Microsoft equivalent of this article.
→ Logging in and account basics - signing up, logging in, and other access problems.