How to create OAuth 2.0 Client Credentials to back up my Google Admin Console?

 Create OAuth 2.0 Client Credentials 

Client credentials are what your application uses to authenticate with Google. They consist of a Client ID and Client Secret.

Create OAuth Client ID

This is where you create the actual OAuth credentials that your application will use.
Instructions:

1. Go to "APIs & Services" > "Credentials"
2. Click the blue "+ CREATE CREDENTIALS" button
3. From the dropdown menu, select "OAuth client ID"
4. If you get a message about creating an OAuth consent screen first, you need to go back to PHASE 2 and complete those steps first
5. In the dialog that appears, select your "Application type". For this integration, select Web application
6. Enter a Name for your credentials (e.g., "My Web Application" or "Backup Service OAuth")
7. Click "CREATE"

Configure Redirect URIs

The redirect URI is critical—it's where Google sends users back to your application after authorization.
Instructions:

1. After clicking CREATE, a dialog will appear showing your new credentials
2. In the Authorized redirect URIs section, you'll see an input field
3. Enter your redirect URI exactly as shown below:
   Your Redirect URI:  https://api.syscloud.com/cloud-connect-canary?cloud=googleadminconsole
4. Important requirements that this URI meets:
   
   1. ✓ Uses HTTPS (not HTTP) - Required for security
   2. ✓ Must match exactly (case-sensitive) - Enter it exactly as shown above
   3. ✓ Must be a valid, accessible URL - This is your SysCloud endpoint
   4. ✓ Must return successful HTTP response - SysCloud server handles this
      
5. Click "CREATE" to save your credentials
   Important Note: Do not remove, modify, or alter the query parameter. The entire URL must be entered exactly as provided.

Save Your Credentials

This is the most critical step. Your credentials are only shown once.
Instructions:

1. After creating the OAuth client, a popup will appear with your credentials
2. This is the ONLY time you'll see the Client Secret in full
3. Client ID: A long string like 123456789-abcdefghijklmnop.apps.googleusercontent.com
   • This is not sensitive and can be shared
   • This identifies your application to Google
4. Client Secret: A string like GOCSPX-abc123def456ghi789
   • This is HIGHLY SENSITIVE
   • Treat it like a password
   • NEVER share it
   • NEVER commit it to version control
   • NEVER expose it in client-side code
5. Download the JSON file: Click the download button to save a JSON file containing your credentials. This file looks like:
   
   {
   "client_id": "123456789-abcdefg.apps.googleusercontent.com",
   "client_secret": "GOCSPX-abc123def456ghi789",
   "redirect_uris": ["https://backup.mycompany.com/oauth/callback"],
   "auth_uri": "https://accounts.google.com/o/oauth2/auth",
   "token_uri": "https://oauth2.googleapis.com/token"
   }
6. Store securely: Save the Client Secret in your application's secure configuration system.

Once the credentials are created, continue to enter the credentials in SysCloud to connect and backup your Google Admin Console. Click here to know how.