Standard Configuration (Client Credentials)

RapidIdentity Platform Documentation

Solution
Application
Content Type: Technical Documentation
Utilities & Services
ft:locale: en-US

RapidIdentity Platform Documentation
Release Notes
RapidIdentity Cloud
2026.06.0 (2026-06-26)
2026.05.0 (2026-05-29)
2026.04.0 (2026-04-17)
2026.03.0 (2026-03-20)
2026.02.0 (2026-02-23)
2026.01.0 (2026-01-23)
RapidIdentity App Release History
2.7.0 (2026-03-09)
Windows Authentication Client
Windows Authentication Client 1.7.0 (2025-12-01)
Identity Solutions
Authentication & Assurance
Applications Module
Applications Module - Applications Filter
Applications Module - My Applications
Applications Module - Settings
How to Control User Accesses to Applications
How do I Remove or Hide Applications from RapidIdentity?
Groups Module
Automatically Exclude Disabled Accounts from Groups
Office 365 Group Management
Groups Module - My Groups and Other Groups
Groups Module - Settings
System Roles
Groups Module - My Groups
RapidIdentity Roles
People Module
How to Configure an Attribute to be End User Editable
Configuration Module
Single Sign-On with RapidIdentity
SAML 2.0 Authentication
IdP-Initiated and SP-Initiated SSO
SAML 2.0 SSO Settings and Attribute Mapping
Creating a Federation Partner for SAML-based SSO
SAML Attribute Configuration
Troubleshooting SAML SSO in RapidIdentity
SAML-Based SSO Integrations
Configuring SAML-Based SSO with Amplify
Configuring SAML-Based SSO with Canva
Configuring SAML-Based SSO with Canvas
Configuring SAML-Based SSO with Character Strong
Configuring SAML-Based SSO with Clever
Configuring SAML-Based SSO with EduPoint Synergy
SSO Authentication with Entra ID
Configuring SAML-Based SSO with Entra ID
Configuring WS-Fed SSO with Entra ID
Troubleshooting Extra Login Prompts from Entra ID
Configuring SAML-Based SSO with GoFMX
Configuring SAML-Based SSO with Google
Configuring SAML-Based SSO with Houghton Mifflin Harcourt (HMH)
Configuring SAML-Based SSO with InCommon
Configuring SAML-Based SSO with LTI 1.0
Configuring SAML-Based SSO with Let's Talk!
Configuring SAML-Based SSO with PowerSchool
Configuring SAML-Based SSO with Salesforce
Configuring SAML-Based SSO with Skyward Qmlativ
Configuring SAML-Based SSO with Smore
Configuring SAML-Based SSO with StemScopes
OAuth 2.0 Authentication
OAuth 2.0 Authorization Request
OAuth 2.0 Access Token Request
OAuth 2.0 Access Token Response
OAuth 2.0 Access Token Refresh
OAuth 2.0 My User Profile Request
OpenID Connect (OIDC) Authentication
OpenID Connect User Endpoints
Configuring OIDC-Based SSO in Canvas for RapidIdentity
Configuring OIDC-Based SSO with Canvas
Configuring OIDC-Based SSO with Jamf Connect
Configuring OIDC-Based SSO with Seesaw
Configuring OIDC-Based SSO in Seesaw
Configuring OIDC-Based SSO with Twocanoes XCreds
Central Authentication Service (CAS)
Central Authentication Service Endpoints
Authentication Methods and Policies
QR Codes in RapidIdentity - Login vs Username
QR Code Login End User Experience
Phone Number Formatting for SMS Authentication
WebAuthn Support for Biometric Authentication Devices
Resolving QR Code Camera Issues on Apple Devices
Configuring AzureAD as RapidIdentity Trusted IDP
Create a Duo Authentication Policy
Duo Registration
Duo Authentication Setup
Enhanced Forgot Username Configuration
How To Configure Kerberos Authentication
SMS Authentication
How to Set Up WebAuthn Policy
Enhanced Forgot Password End User Experience
Legacy Forgot Password End User Experience
Mobile App Authentication End User Experience
Pictograph Authentication End User Experience
Unified Login with RapidIdentity
Configuring the Appearance and Branding of the RapidIdentity Portal
Creating a Unified Authentication Policy
Default Policies
Configuring a Custom Password Policy
Configuring a Custom Forgot Password Policy
Configuring User Agreement Policies
Creating a Conditional Access Policy
Portal Setup Options for Sign-in Methods
Accessing Your Authentication Methods
Available Sign-in Methods
Enrolling in a Sign-in Method
Managing an Enrolled Method
Enrollment Reminder
Sign-in Method Troubleshooting
Adding Custom Helper Text
Unified Login End User Experience
RapidIdentity Fine-Grained Password Policies
Password Syntax
Password Expiration
Password Screening and Reset Controls
Account Lockout
Identity Verification
Identity Lifecycle Management
Connect Module
Google
OAuth for G-Suite Adapter Configuration Methods
Create a Google Cloud Platform Project
Creating a Client ID/Secret (GOOGLE)
Creating and Authorizing a Service Account Key (GOOGLE_EXTENDED)
Creating an Administrator Account (GOOGLE & GOOGLE_EXTENDED)
Creating a GOOGLE OAuth2 Credential in Connect
Creating a GOOGLE_EXTENDED OAuth2 Credential in Connect
Creating a G-Suite Connection Using GOOGLE OAuth2 Credential
Creating a G-Suite Connection Using GOOGLE_EXTENDED OAuth2 Credential
Deleting an OAuth Credential
Standard Configuration (Client Credentials)
Create a Client ID and Secret
Creating a GOOGLE OAuth2 Credential in Connect
Creating a G-Suite connection using GOOGLE OAuth2 Credential
Google Extended (Service Account)
Create Project
Enable "Admin SDK"
Creating a Service Account and Key
Authorizing Service Account Key
Creating a GOOGLE_EXTENDED OAuth2 Credential in Connect
Creating a G-Suite connection using GOOGLE_EXTENDED OAuth2 Credential
Google Extended (OAuth Service Account)
Create a Service Account and Key
Authorizing Service Account Key
Creating a GOOGLE_EXTENDED OAuth2 Credential in Connect
Creating a G-Suite Connection using GOOGLE_EXTENDED OAuth2 Credential
Google Adapter Actions Reference
G-Suite Adapter Record Fields Reference
Checking G-Suite API Quotas
Error Google 'Token has been expired or revoked'
Identity Hub
Identity Hub
Identity Provisioning Adapters Catalog
Username Policies
Username Creation Policies
Rename Policies
Advanced Settings and Attribute Details for Username Policies
Configuring a Username Policy in ID Hub
Password Policies
Password Sync Options
Syncing Passwords after a Reset
Syncing Passwords on Account Creation
Syncing Passwords with Account Updates
Custom Initial Password Policies
Configuring an Initial Password Policy in ID Hub
Reports and Notifications
Reports Module
Building a Report in Identity Hub
Identity Hub Report Filters
Default and Custom Reports in Identity Hub
Saving a Custom Report in Identity Hub
Updating a Saved Report in Identity Hub
Deleting a Custom Report in Identity Hub
Exporting a Report to CSV in Identity Hub
Sharing a Report Link in Identity Hub
Notifications
Configuring Notification Settings in Identity Hub
Identity Hub Notification Types
Best Practices
Password Policies Best Practices
RapidIdentity Claim Process Best Practices
Usernames Best Practices
Time Based Provisioning
RapidIdentity Cloud Directory Schema
RapidIdentity Cloud Account Attributes
RapidIdentity Cloud Group Attributes
RapidIdentity Cloud Operational Attributes
Adding a Source CSV File in ID Hub
Mapping Source Attributes to the RapidIdentity Schema
Scheduling Periodic Source Data Imports
Adding a Source Application in ID Hub
Mapping Source Attributes to the RapidIdentity Schema
Scheduling Periodic Source Data Imports
Adding a Source Directory in ID Hub
Mapping Source Attributes to the RapidIdentity Schema
Scheduling Periodic Source Data Imports
Adding a RapidIdentity Connect Source File to ID Hub
Mapping Source Attributes to the RapidIdentity Schema
Scheduling Periodic Source Data Imports
Configuring Source Priority and Authority
Viewing and Interpreting Logs in ID Hub
Using the Connect Source Adapter
Viewing and Interpreting Logs
Configure Connection Settings
Configure Credentials
Configure Mappings
Configuring Source of Authority
Configuring Source Priority
Insights
Reports Module
Adding and Running a Report
Community Reports
Reports Settings
Provisioning
Account Deletions - Best Practices
Active Directory Password Filter Details
Identity and Access Management Permissions for Cloud Deployment
Username Policies: Best Practices
Example Fields for HR and SIS Extracts or Views for RapidIdentity
Creating a Google OAuth2 Service Account for ID Hub
Creating an Azure OAuth2 Application for RapidIdentity
Creating a Google Extended OAuth2 Service Account in RapidIdentity
How to Update your Third Party Service Account Credentials
Installing a Password Filter for Active Directory
Account Claim
Account Claim End User Experience
Threat Detection and Response
Phishing Protection
PhishID Settings
PhishID Label
PhishID Contact Info
PhishID Progress Bar
PhishID "This is Safe" Button
how-does-phishid-work
Content Filtering Configuration for PhishID
PhishID Communication Template
Adding a Domain to the Allowed Domains for PhishID
Manually Blocking a URL in the Admin Console
Testing PhishID with a Suspicious URL
PhishID Deployment Guides
Deploying PhishID to macOS Computers with Jamf Pro
Uninstall PhishID (Pixm) with Jamf Pro
Deploying PhishID on Mobile Devices Using Jamf Pro
Uninstall PhishID from Mobile Devices Using Jamf Pro
Deploying PhishID with Microsoft Intune
Deploying PhishID with GPO
Deploying PhishID Manually
Deploying PhishID with Google Workspaces
RapidIdentity SafeID
SafeID Overview Dashboard
SafeID Configuration Options in RapidIdentity
SafeID Advanced Remediation with Connect Action Set
SafeID Detailed Reporting using Connect Action Set
SafeID Definitions
SafeID FAQ
Adding MFA to Compromised Users
Managing Compromised Accounts in RapidIdentity SafeID
How to export a list of Compromised Accounts
RapidIdentity ShieldID
Security Manager
Ingesting RapidIdentity Logs into Your SIEM/MDR Solution
Access Governance
Requests Module
Classroom Solutions
Rostering
Rostering Applications Catalog in Studio
RapidIdentity Studio Plug-in for PowerSchool
Exchanging Roster Data Using Apple School Manager REST
Create a Studio Application
Studio Jobs and Job Orchestration
Change the Application Prefix
Setting Record Thresholds in Studio
Studio Expressions
Studio Mappings, Matching and Event Governance
Mapping Expression Examples
Validate Reference Fields on the Enrollment Record
Change a Username from studentID to the First Part of a User's Email
Add a Field in Enrollments to Provide the Name of a Class
Removing Field Values based on Access Groups
How to Reformat the Birthday Value
How to Change the Grade Level to a Number
Troubleshooting in Studio
Studio Troubleshooting Best Practices
Job History Logs
Data Explorer
How to Exclude Unneeded Files from a Studio Application Template
CSV Formatting for OneRoster Providers
academicSessions.csv Data Headers
classes.csv Data Headers
courses.csv Headers
demographics.csv Headers
enrollments.csv Headers
orgs.csv Headers
users.csv Headers
Updates Made to Studio Scheduling in RapidIdentity 2022.4.5
Common Studio Log Error Definitions
Verification of OneRoster REST Consumer on the Studio Tenant
Studio Access Groups
How do Access Groups work (at a high level)?
Studio Data Schema
Add the schoolNumber Field as an ID Hub Mapping
Infinite Campus API Sync
Infinite Campus API Sync Details
Requirements for User Portal Accounts
Step 1: Obtain API Credentials in Infinite Campus
Step 2: Enter API Credentials in RapidIdentity
Step 3: Import Data
GO! View
Configuring RapidIdentity GO! View
Profile Self Service Methods in Go! View
Administrator Managed Folders for GO! View
User Created Custom Apps
How to Configure RapidIdentity Go! Mobile Application
RapidIdentity GO! View Portal Logo Guidelines
RapidIdentity GO! View Portal Personas and Applications
Creating Announcements
Password Vault in RapidIdentity
Creating Applications with Password Vaults
Password Vault Extension
Deploying RI Password Vaulting Extension with Management Services
Downloadable Password Vault Browser Extension Files
Using the Password Vault in Classic View
Using Password Vault in GO! View
Setting Up Password Vault Management Delegation
Seamless Learning Access
Seamless Learning Access System Components
Requirements for Seamless Learning Access
Configuring RapidIdentity for Seamless Learning Access
Activating the RapidIdentity Administrator Account
Creating RapidIdentity API Credentials
Configuring User Import and Synchronization from Jamf Pro
Configuring User Import and Synchronization from Jamf School
Configuring an SSO Application Federation in RapidIdentity
Configuring an SSO Application Card
Configuring the Account Lockout Policy for Users
Configuring Session Inactivity Expiration
Mapping the Seamless Learning Access User ID in Identity Hub
Mapping in Environments with Shared iPad Devices
Mapping in Environments with 1:1 iPad Devices
Mapping in Environments with Shared iPad Devices and 1:1 iPad Devices
Verifying the Mapping in Identity Hub
Configuring Jamf Pro for Seamless Learning Access
Installing the Seamless Learning Access App
Configuring Jamf Pro for Seamless Learning Access with Blueprints
Managed App Configurations for Seamless Learning Access
Configuring Jamf School for Seamless Learning Access
Installing the Seamless Learning Access App
Configuring Jamf School for Seamless Learning Access with Blueprints
Managing Seamless Learning Access
Creating a Seamless Learning Access Authentication Policy
Excluding Seamless Learning Access Users from Forgot Password Policies
Unlocking User Accounts in RapidIdentity
Viewing Seamless Learning Access Activity in RapidIdentity
Installable Components
Identity Bridge
Creating an Identity Bridge
Configuring Identity Bridge Settings in RapidIdentity
Installing Microsoft .NET 8.0
Installing the Identity Bridge Agent Service
Adding the Identity Bridge to the RapidIdentity Portal
Allowing Traffic to and from RapidIdentity Cloud
Excluding Identity Bridge Agent from Windows Security
Testing an Identity Bridge Connection
Troubleshooting an Identity Bridge Connection
Enabling Windows File Shares with Identity Bridge
Configuring Identity Bridge Settings in RapidIdentity
Installing Microsoft .NET 8.0
Installing the Identity Bridge Agent Service
Adding Identity Bridge and Configuring File Share Settings
Adding a Windows File Share to Your RapidIdentity Tenant
Upgrading the Identity Bridge Agent In-Place
Reinstalling the Identity Bridge Agent for Recovery
Windows Authentication Client
Windows Authentication Client System Requirements
Windows Authentication Client: Supported or Not?
Windows Authentication Client Known Issues and Limitations
Windows Authentication Client Installations
Installing Windows Authentication Client
Command-Line Installation
Deploying the Windows Client with Command Line Parameters
Installing the Windows Authentication Client on a Hyper-V Machine
Configuration
Service Identities
Creating an API Key In RapidIdentity
Assign the Key to the Service Identity
Connecting to Domain-Joined Computers
Connecting to Domain-Joined Computers
Customizing Branding Logo For Windows AuthClient
Deploying MSI Installer for Windows Authentication with Windows Group Policy Object
Creating a Transform File
Creating a Security Group
Creating a Distribution Point
Creating a Group Policy Object
Assigning an Installer Package
Removing a Package
Testing the Group Policy Object
Uninstalling a Group Policy Object
Deploying an MSI Installer Package with Microsoft Intune
Creating a Microsoft Intune App
Syncing an Application
Monitoring the Deployment
Updating a Line-of-Business App Manually
Uninstalling an App
Windows Autopilot-Enrolling a device in Microsoft Intune
Prerequisites
How to Create a New User
Capture Client Workstation Hardware ID
Client Workstation Registration via Microsoft Intune
Configure Microsoft Intune Auto-Enrollment
Create and assign a Windows Autopilot deployment profile
Create the deployment profile
Reset Client Workstation back to Out-Of-Box-Experience (OOBE)
Windows Autopilot OOBE experience on Client Workstation
Delete (deregister) Autopilot device
Microsoft Intune Subscription Level Verification
Remove devices from Autopilot
Assign licenses to users so they can enroll devices in Intune
Fast User Switching with the RapidIdentity Windows Authentication Client
Fast User Switching (FUS) UI/UX Enhancements
Fast User Switching (FUS) Traditional Approach
Administrative Guide to Fast User Switching
Scenario 1: The machine is 'personal', and not managed by the organization
Scenario 2: The machine is not joined to a domain
Scenario 3: If the machine is domain joined, then the domain controller is responsible for managing this setting
Scenario 3a: The machine is Hybrid Intune Device managed
Offline Access with the Windows Authentication Client
Disabling Credential Caching with Offline Access
Support for WebAuthn/FIDO2 Authentication
Removing Other User Login Options
Forcing RapidIdentity Windows Authentication Client as only way to login
Uninstalling Windows Authentication Client
Troubleshooting Hybrid Azure AD Join Issues
Join Windows 10 Computer to Azure AD Using Hybrid Domain Join Method
Install and Configure Azure AD Connect to Sync On Premises AD Users
User is routed back to Logon Tile even after entering correct Username
Group Policy-Enrolling a device in Microsoft Intune
Device Enrollment Manager - Enrolling a device in Microsoft Intune
Upgrade RapidIdentity Client for Windows
Windows Authentication Client Project Setup, Installation, and Upgrade on a VM
Deploying the Windows Authentication Client to Intune-Managed Devices
Copyright and Trademarks

Create a Client ID and Secret
Creating a GOOGLE OAuth2 Credential in Connect
Creating a G-Suite connection using GOOGLE OAuth2 Credential

Back to home page