How to create a Google Cloud project and OAuth consent screen for your application before generating OAuth credentials?

Google Cloud Project Creation

Before you can create OAuth credentials, you need a Google Cloud project. This project serves as a container for all your APIs and authentication configurations.

Note: If you already have an account with ‘Google Cloud console” you can skip Step 1.

STEP 1: Access Google Cloud Console

The Google Cloud Console is where you'll manage all your cloud resources and OAuth configurations.
Instructions:

1. Navigate to https://console.cloud.google.com/ 
2. Sign in with your Google Account (use an account with admin access)
3. If you see a welcome screen, read through it and click "Agree and continue"
4. Accept the terms of service if prompted

STEP 2: Create a New Project

A Google Cloud project is a container that holds all your APIs, credentials, and settings.
Instructions:

1. Click on the Project Selector dropdown on the top left of the page.
2. In the popup window that appears, click the blue "NEW PROJECT" button. 
3. A form will appear asking for project details:
   • Project Name: Enter a meaningful name like "My Backup Application" or "OAuth Integration Project"
   • Location: Leave this as "No organization" unless your organization specifies otherwise
   • Organization: This will likely be auto-filled or show "No organization"
4. Click the blue "CREATE" button.
5. You'll see a notification at the bottom right indicating "Project creation in progress." Once complete, you'll be automatically switched to your new project.

STEP 3: Enable Required APIs

1. Search for ‘Admin SDK API’ and ‘Enable’
2. Wait for the API to be enabled (you'll see a loading indicator)
   Note: When you enable an API, Google Cloud grants your project access to that API. This doesn't immediately consume resources; it just makes the API available for your project to use.

PHASE 2: OAuth 2.0 Consent Screen Configuration

The OAuth consent screen is what users see when they're asked to authorize your application. It should clearly explain what your application does and what permissions it needs.

STEP 4: Create OAuth 2.0 Consent Screen

Instructions:

1. In the left sidebar under "APIs & Services," click "OAuth consent screen"
2. You'll be asked to select a user type:
   • External: Choose this option (recommended for most applications). This allows you to create an application that can be used by anyone with a Google account.
   • Internal: Choose this only if your organization specifically requires it. This limits access to users within your Google Workspace domain.
3. Click the "CREATE" button

STEP 5: Configure Consent Screen Details

This is where you provide information about your application that users will see.
Instructions:

1. Application Name: Enter your application's name (e.g., "MyCompany Backup Service"). This will appear on the consent screen, so make it something users will recognize.
2. User Support Email: Enter an email address where users can contact you if they have questions about your application's privacy or security.
3. Application Logo: Upload a logo for your application (optional but recommended).
4. Authorized Domains: Add the domain(s) where your application is hosted:
   • Click "Add Domain"
   • Enter your domain name (e.g., backup.mycompany.com)
   • You may need to verify domain ownership. If prompted, follow Google's verification process.
   • Add multiple domains if your application is hosted in multiple locations
5. Developer Contact Information: Enter your contact email (e.g., admin@mycompany.com). This is where Google will contact you if there are issues with your application.
6. Privacy Policy URL (Optional): If you have a privacy policy, add it here
7. Terms of Service URL (Optional): If you have terms of service, add it here

STEP 6: Define OAuth Scopes

Scopes define what permissions your application is requesting.
Instructions:

1. Click "ADD OR REMOVE SCOPES"
2. A scope selection dialog will appear with a search bar and list of available scopes
3. You need to add all 14 required scopes for this integration (see the detailed scope section below for descriptions)
4. For each scope, either:
   • Search for it by name in the search box
   • Scroll to find it in the list
   • Click the checkbox next to the scope to select it
5. Once you've selected all 14 scopes, click "UPDATE"
6. Click "SAVE AND CONTINUE"

Click here to know, how to generate the OAuth client credentials to connect your Google Admin Console to SysCloud backup application.