Google Workspace Client Secrets

For security reasons, you may need to periodically reset the OAuth client secret for your Google web application. When you reset the client secret in your Google API Console, update it in Authentication to retain your SSO connection.

Warning: To help prevent an inadvertent lockout, ensure you have another Blackbaud ID outside of your claimed domains with access to your Authentication.

Note: For information about how to set up a custom Security Assertion Markup Language (SAML) 2.0 app in your Google Workspace admin console for single sign-on (SSO), see SAML 2.0 Setup for Google Workspace.

  1. In Admin, select Authentication, and then select Manage SSO settings under Single sign-on.

  2. In a separate browser tab, sign in to your Google API Console as an administrator, and reset your client secret.

    1. Select Credentials, Credentials.

    2. Under OAuth 2.0 client IDs, select the name of your web application's project.

    3. Select Reset secret and Reset.

    4. In the Client secret field, copy the new secret.

  3. In Authentication, update the client secret.

    1. Under Single sign-on with Google Workspace, select Update client secret.

    2. Paste or enter the new client secret.

    3. Select Save.