Does an API exist to setup OAuth Consent and Brand Verification?

30 views
Skip to first unread message

Marko4 Max

unread,
Apr 18, 2022, 1:54:32 PM4/18/22
to google-cicp-discussion
Hello.

I am trying to build a 3'rd party app that provides Login services to a variety of Identity Providers, including typical Social Id Providers like Google, Facebook, etc...

My Customers would typically be ecommerce shop owners, so they are not so technically savvy.

Say the shop is "BigPuppy.com".   A user of their website tries to register for an account.   They pick "Sign-in with Google".   Then they get a popup to give consent to "BigPuppy.com" to provide the user's profile info.

The consent screen title is something like...
"Sign into <app> with Google."

The store owner should submit for brand verification so that consent app name is branded...
(example: "Sign into Big Puppy with Google.")

https://developers.google.com/identity/protocols/oauth2/production-readiness/brand-verification

Since the shop owner is often a tech novice, i would like to automate this work as much as possible.

Ideally there would be an API that would allow me to automate the Consent setup and Brand Verification on behalf of the shop owner?

The next best alternative might be the ability of the shop owner to set me up as a User that would have access to (manually) do the consent setup.

Does such an API exist?  Or can a user be setup with enough restricted access to accomplish the consent setup?

Thank you.

darrel...@google.com

unread,
Apr 19, 2022, 1:45:11 PM4/19/22
to google-cicp-discussion
Hi,

Unfortunately, there is no API that would allow you to automate the Consent Screen setup  and Brand verification. Currently, there is a Feature request opened regarding this inquiry and the product team are aware of this need. I invite you to "star" and post your use case on this page to increase its visibility. However, I cannot provide an ETA for the fulfillment of the feature request.

As for the restricting access to complete the consent setup, I have been looking at the necessary permissions to do so, and it looks like "OAuth Config Editor" allows you read/write access to OAuth config resources.

I hope you find this information useful!

[1] https://issuetracker.google.com/35907249
Reply all
Reply to author
Forward
0 new messages