---
title: Get a refresh token
description: "To allow the Google IdP Adapter to retrieve \"Extended Profile\" attributes for G Suite users, use your application credentials to get an OAuth 2.0 refresh token."
component: google
page_id: google:google_login_integration_kit:pf_google_cic_get_a_refresh_token
canonical_url: https://docs.pingidentity.com/integrations/google/google_login_integration_kit/pf_google_cic_get_a_refresh_token.html
revdate: June 24, 2024
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Get a refresh token

To allow the Google IdP Adapter to retrieve "Extended Profile" attributes for G Suite users, use your application credentials to get an OAuth 2.0 refresh token.

## About this task

|   |                                                                                                                                                                                                                                                                              |
| - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | These steps are not required if you only want the email address or "Basic Profile" attributes for your users. For a list of attributes available under each profile type, see [Available user attributes reference](pf_google_cic_available_user_attributes_reference.html). |

## Steps

1. Go to the Ping Identity [OAuth Configuration Service](https://oauth.pingone.com/ocs/ppm/rest/v1/oauth/oasrequestform).

2. Select **Google Apps Connector** from the drop-down menu.

   ![The Ping Identity OAuth Configuration Service](_images/xhe1563995362420.png)

3. In the **Client ID** field, enter the value that you noted in [Registering PingFederate in Google](pf_google_cic_registering_pf_in_google.html).

4. In the **Client Secret** field, enter the value that you noted in [Registering PingFederate in Google](pf_google_cic_registering_pf_in_google.html).

5. Click **Connect**.

6. Sign on using the G Suite developer account that meets the requirements described in [Google Login Integration Kit](pf_google_cic.html).

   |   |                                                                              |
   | - | ---------------------------------------------------------------------------- |
   |   | If you have already signed on, Google might not prompt you to sign on again. |

7. Grant access to the requested permissions by clicking **Allow**.

8. On the **Service Response** modal, note the **Refresh Token**. You will use this in [Configuring an adapter instance](pf_google_cic_configuring_an_adapter_instance.html).

   ![An example response shown by the OAuth Configuration Service](_images/zxl1563995363368.png)