If you want to use a service account as your authentication method for Password Sync, you need to create an account and set it up before you install Password Sync.
Complete the steps in Create a service account.
On the Admin console Home page, go to SecurityAPI controls.
Click Manage Domain Wide Delegation.
Click Add new and enter your service account client ID.
You can find the ID (also known as the Unique ID) in the JSON file that you downloaded when you created the service account or in the Google Cloud Console (click IAM & AdminService accountsyour service account).
Click Client ID and enter your service account client ID.
You can find the service account client ID in the JSON file that you downloaded when you created the service account. Alternatively, you can find the client ID (also known as the Unique ID) in the Google Cloud Console. Click IAM & AdminService accounts and then select your service account.
- In the OAuth scopes field, copy and paste the following scope:
- Click Authorize.
Select the new client ID, click View details, and make sure every scope is listed.
If a scope is not listed, click Edit, enter the missing scope, and click Authorize. You can't edit the client ID.
- Go back to the Cloud Console and click Save.
You're now ready to Add users to your Google domain.
Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.