GAM and Identity-Aware Proxy (IAP) OAuth Admin APIs warning from Google

[Ian Crew]

Hi all:

I just got the following message from Google this morning, and am wondering what I need to do about it—the only project mentioned is GAM….

Thanks,

Ian

We’re writing to inform you about upcoming changes to the Identity-Aware Proxy (IAP) OAuth Admin APIs. Please keep the following dates in mind:

• April 2025: Google will discontinue support for the IAP OAuth Admin APIs.
• July 2025: The IAP OAuth Admin APIs will be permanently shut down. Access to this feature will no longer be available.

We understand that this change will directly impact you and your team, so we’ve provided additional information below to guide you through this change and its impact.

What you need to know

After July 2025, you will not be able to programmatically create and manage internal OAuth clients programmatic for IAP use.

As an alternative, we recommend using the Google-managed OAuth client feature. This feature provides similar functionality to internal OAuth clients with the benefit of being managed by Google, which simplifies the management process.

To learn more about the differences and benefits of Google-managed OAuth clients, please refer to the Identity-Aware Proxy documentation.

What you need to do

Before July 2025:

Discontinue the use of the IAP OAuth Admin APIs and transition to Google-managed OAuth clients. To make this switch, remove the OAuth credentials that were previously configured when enabling IAP.

After July 2025:

If no action is taken, you will receive an error when you access the API.

Your affected projects, format project_id (project_number), are listed below:

[GAM is the only project listed]

--

Ian Crew

Architect, Communication and Collaboration Services
Productivity & Collaboration Services
Berkeley IT

University of California, Berkeley

[Corey Smith]

I got the same email and was looking to see if the GAM / GAM7 page has an update but im not seeing any thing yet. Any one know how i can migrate ? 

[Jason Stepp]

I received the same email from Google.  I'm... guessing this is going to be a problem since I use GAM quite a bit.  I recently just setup GAM with a new project and it's the same problem... is this effectively going to kill the project?

[Jay Lee]

Yes, pretty much everyone who setup GAM will get this MSA (sigh).

tl;dr - I'm looking into it. This may possibly require some changes to the GAM project creation / setup flow but shouldn't be a major issue. Nothing to worry about. Please track this going forward in https://github.com/GAM-team/GAM/issues/1738

Jay Lee

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/506f2c88-df66-4b56-9669-0588b38de7afn%40googlegroups.com.

[Corey Smith]

Thanks for the update Jay ! 

[Corey Smith]

I’m not an expert coder, but I use GAM daily. How can I verify whether my current authentication is using IAP API OAuth? Would it be better to delete my existing project and reinstall from scratch, or is there a straightforward way to update my current installation to use the new method?

I see this was fixed in 7.03.00

Thanks, 

Corey

[Ross Scroggs]

You don't have to do anything for existing projects, that API was only used when creating new projects.

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/1d53de4b-e874-4d93-b715-302c061261fen%40googlegroups.com.

[Saeed Hasan]

I am new to GAM and created couple of projects using GAMADV-XTD3 back in November 2024. Now, received an email from Google to convert those projects using Google managed Oauth. I will appreciate if someone can guide me converting existing gam apps or it's better to create new project using GAM 7.0.?.

Any help will be appreciated.

Regards

[Ross Scroggs]

Ignore the message, that API is only used when creating new projects anf GAM no longer uses it.

You should update to GAM7, see: https://github.com/taers232c/GAMADV-XTD3/wiki/How-to-Upgrade-GAMADV-XTD3-to-GAM7

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/5da73dc1-a328-4a90-bddf-38dea7378370n%40googlegroups.com.