Creating and Authorizing a Service Account Key (GOOGLE_EXTENDED)

RapidIdentity Platform Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

A Client ID and Client Secret are needed to create a standard GOOGLE OAuth2 Credential.

  1. Create the service account:
    1. Navigate to Google Cloud Platform Console and select the project created above.
    2. Click on the menu button at the top left of the page, and select API Manager.
    3. In the sidebar on the left, select Credentials.
    4. Select Create Credentials tab.
    5. Click the Create credentials button and select Service account key.
  2. Configure the service account settings:
    1. In the Service Account drop-down, select New service account.
    2. Enter an appropriate Service account name.
    3. Select the Project -> Service Account Actor role.
      If actor role does not exist then 'owner' will work too.
    4. Leave the Service account ID default value.
    5. Make sure JSON is selected as the Key type.
    6. Click the Create button and then OK.
  3. Save and configure the service account:
    1. Save the downloaded JSON file containing the account information.
      Make sure it is stored somewhere secure.
    2. Press the close button.
    3. Click the Manage service accounts link.
    4. Click the More actions button in the row corresponding to your newly created service account and select Edit.
      If that button is not visible you may need to scroll to the right.
    5. Select the Enable G-Suite Domain-wide Delegation checkbox, and press Save.
  4. Authorize the Service Account Key to access a Google domain:
    1. Login to Google Admin Console as a User with Super Admin role.
    2. Click on Security.
    3. Click on Show more.
    4. Click on Advanced settings.
    5. Click on Manage API client access.
    6. Open the JSON file that was downloaded when you created the Service Account Key.
    7. Copy the value of the client_id field (without the enclosing quotes) and paste into the Client Name field in the browser.
    8. Enter the scopes you want to grant access to, separated by commas, in the One or More API scopes field and press the Authorize button.
      A list of available scopes is available at: https://developers.google.com/identity/protocols/googlescopes

Additional scopes may be added later by repeating the scope configuration steps.