Authorize Password Sync for your domain

If you want to use a service account as your authentication method for Password Sync, you need to create an account and set it up before you install Password Sync.

Step 1: Create a service account

Complete the steps in Create a service account.

Step 2: Authorize your client ID in the Admin console

  1. Sign in to your Google Admin console.

    Sign in using an account with super administrator privileges (does not end in

  2. On the Admin console Home page, go to Securityand thenAPI controls.
  3. Click Manage Domain Wide Delegation.
  4. Click Add new and enter your service account client ID.

    You can find the ID (also known as the Unique ID) in the JSON file that you downloaded when you created the service account or in the Google Cloud Console (click IAM & Adminand thenService accountsand thenyour service account).

  5. Click Client ID and enter your service account client ID.

    You can find the service account client ID in the JSON file that you downloaded when you created the service account. Alternatively, you can find the client ID (also known as the Unique ID) in the Google Cloud Console. Click IAM & Adminand thenService accounts and then select your service account.

  6. In the OAuth scopes field, copy and paste the following scope:

  7. Click Authorize.
  8. Select the new client ID, click View details, and make sure every scope is listed.

    If a scope is not listed, click Edit, enter the missing scope, and click Authorize. You can't edit the client ID.

  9. Go back to the Cloud Console and click Save.

Next steps

You're now ready to Add users to your Google domain.

Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue

Clear search
Close search
Google apps
Main menu
Search Help Center