I have an Apps Script project for a Google Sheets Editor Add-on. It is linked to a GCP project.
In the GCP project, I completed the "OAuth consent screen". I also completed the "App Configuration" and "Store Listing" screens for the "Google Workspace Marketplace SDK".
The "OAuth consent screen" has a "Publish App" button. The "Store Listing" screen has a "Publish" button.
Which of these should be activated first? Is there a separate verification process for OAuth and the Marketplace listing or is there only one?.
[ Also: When I press Publish on the OAuth screen, it tells me I need to include a URL to a youtube video and a written explanation of why the apps require sensitive access. But I don't see any place to include this info on the form. How do I do this? ]
You must finish the OAuth consent screen verification first, then complete the GWM store listing.
Both processes are completely different. The marketplace listing is just for your app to appear in the list of apps in the Google Workspace Marketplace, and the OAuth verification process is the security check that you have to pass in order for your app to be available for more than 100 users in case you use sensitive/restricted scopes that manage Google accounts' sensitive info, that is why this process requires a specific video showing how you are going to be using the users' data in your app with the selected scopes.
However, based in Google's official documentation, you can't publish your app until you have passed the OAuth verification process because that is included in the review that Google does for the GWM store listing.