Google Workspace Client Secrets

Note: This help topic describes new single sign-on (SSO) setup options for Google Workspace. To enhance security and stability, Blackbaud has switched to a new SSO authentication service. Organizations that already use SSO will now see a New single sign-on tab on the Authentication settings page in Security and must set up new SSO connections by Oct. 31.

For security reasons, you may need to periodically reset the OAuth client secret for your Google Workflow web application. When you reset the client secret in your Google API Console, update it in Authentication to retain your SSO connection.

Warning: To help prevent an inadvertent lockout, make sure you have another Blackbaud ID outside of your claimed domains that has access to the Authentication settings page in Security.

  1. In Security, select Authentication and then select Manage SSO settings under Single sign-on.

  2. In a separate browser tab, sign in to your Google API Console as an administrator, and reset your client secret.

    1. Select Credentials, Credentials.

    2. Under OAuth 2.0 client IDs, select the name of your web application's project.

    3. Select Reset secret and Reset.

    4. In the Client secret field, copy the new secret.

  3. Return to Blackbaud's Single sign-on page to update the client secret.

    1. Under Single sign-on with Google Workspace, select Update client secret.

    2. Paste or enter the new client secret.

    3. Select Save.