Authorizing Service Account Key

RapidIdentity Platform Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
  1. Login to Google Admin Console as a User with the Super Admin role.
  2. Click on Security.
  3. Click on Access and data control.
  4. Click on API Controls.
  5. Click on Advanced settings.
  6. Click on MANAGE DOMAIN WIDE DELEGATION.

    URL: https://admin.google.com/ac/owl/domainwidedelegation

  7. Click Add new.
  8. Open the JSON file that was downloaded when you created the Service Account Key.
    1. Copy the value of the client_id field (without enclosing quotes).
    2. Paste the value into the Client ID field in the browser.
  9. Enter the scopes you want to grant access to, separated by commas, in the OAuth scopes field.

    Available scopes can be found at: https://developers.google.com/identity/protocols/googlescopes

    Cloud Engineer Default Scopes For RapidIdentity Cloud:

    • https://www.googleapis.com/auth/admin.directory.user.readonly
    • https://www.googleapis.com/auth/admin.directory.user
    • https://www.googleapis.com/auth/admin.datatransfer
    • https://www.googleapis.com/auth/admin.directory.group
    • https://www.googleapis.com/auth/admin.directory.orgunit
    • https://www.googleapis.com/auth/admin.directory.userschema
  10. Click the Authorize button.

    Additional scopes may be added later by repeating the previous two steps.