Method: projects.brands.identityAwareProxyClients.create

Creates an Identity Aware Proxy (IAP) OAuth client. The client is owned by IAP. Requires that the brand for the project exists and that it is set for internal-only use.

HTTP request


The URL uses gRPC Transcoding syntax.

Path parameters



Required. Path to create the client in. In the following format: projects/{projectNumber/id}/brands/{brand}. The project must belong to a G Suite account.

Authorization requires one or more of the following IAM permissions on the specified resource parent:

  • clientauthconfig.brands.get
  • clientauthconfig.clients.create
  • clientauthconfig.clients.update

Request body

The request body contains an instance of IdentityAwareProxyClient.

Response body

If successful, the response body contains a newly created instance of IdentityAwareProxyClient.

Authorization Scopes

Requires the following OAuth scope:


For more information, see the Authentication Overview.