RapidIdentity Product Guide

Connect OAuth2 Credentials Module

Currently, the RapidIdentity Connect OAuth2 Credentials tab allows administrators to add Google, Google Extended (i.e. Service Accounts), and Edmodo OAuth 2.0 credentials.

Read Configuring OAuth2 for G-Suite Adapter for specific information on Google OAuth2 configuration.

Create credentials for any existing project or All (*) projects, and those credentials will be open to any Action Set and RESTPoint within that project.

OAuth2_2019c.png

Administrators can select an existing project, leave the Project set as <Main>, or choose to apply this to All (*) projects.

Note

Consumer credentials created under All (*) projects are accessible by any project on the system. This option is only available in OAuth1 Consumers and OAuth 2 Credentials.

OAuth2_Credentials_All_Projects.png

Upon selecting the appropriate project and clicking Add, selecting Google, Google Extended, or Edmodo opens a specific Request OAuth Credential window.

OAuth2_Add_Credential.png

Each provider choice has different fields that must be populated, and Google and Edmodo provide choices for permissions that can be assigned to each credential.

Edmodo's login mechanism, Edmodo Connect, and Google APIs both employ the OAuth 2.0 protocol to authenticate and authorize, and RapidIdentity Connect supports both.

OAuth2 Credential - Google
OAuth2_Google_Fields.png
Table 307. OAuth2 Credential - Google Fields

Field

Description

Name

Give the credential a name (must be unique within the project.)

Provider

The chosen provider (in this case, Google)

Client ID

Google Client ID for this credential

Client Secret

Google Client Secret for this credential

Username

Username to be used for this credential



The Google Credential menu provides permissions settings that can be set for this individual credential, as well as an Add Custom Permission field.

The Add Custom Permission button allows administrators to specify additional scopes to authorize when the desired scope is not listed. This allows administrators to make API calls that are not supported by RapidIdentity Connect directly.

OAuth2 Credential - Google Extended
OAuth2_Google_Extended_Fields.png
Table 308. OAuth2 Credential - Google Extended Fields

Field

Description

Name

Give the credential a name (must be unique within the project.)

Provider

The chosen provider (In this case, Google Extended)

Google Service Account JSON

Open the JSON file you received when you created the Service Account Key and copy and the paste the contents into the Google Service Account JSON field.



Google Extended does not provide more options for permissions, as those would be configured within the JSON contents.

OAuth2 Credential - Edmodo
OAuth2_Edmodo_Fields.png
Table 309. OAuth2 Credential - Edmodo Fields

Fields

Description

Name

Give the credential a name that makes it easy to

Provider

The chosen provider (In this case, Edmodo)

Username

Edmodo username that corresponds to the eventual RapidIdentity Connect Action for Edmodo OAuth



Edmodo provides the option to select permissions to be granted to this credential.

Once the request is complete, the workspace will display the credential.

To remove the credential, click the checkbox and then click Delete (administrators should also go to the Google Developers Console to delete the Client ID as well for applicable credentials).