---
title: Generate authorized OAuth 2.0 tokens
description: Go to the Ping Identity OAuth Configuration Service.
component: google
page_id: google:google_workspace_provisioner:pf_google_workforce_connector_generate_authorized_oauth_20_tokens
canonical_url: https://docs.pingidentity.com/integrations/google/google_workspace_provisioner/pf_google_workforce_connector_generate_authorized_oauth_20_tokens.html
llms_txt: https://docs.pingidentity.com/integrations/google/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: June 27, 2024
section_ids:
  steps: Steps
---

# Generate authorized OAuth 2.0 tokens

## Steps

1. Go to the Ping Identity [OAuth Configuration Service](https://oauth.pingone.com/ocs/ppm/rest/v1/oauth/oasrequestform).

2. Select the **Google Workspace Connector** in the list.

3. Enter the **Client ID** and **Client Secret** that you generated in the [Obtain an application name, client ID, and secret](pf_google_workforce_connector_obtain_an_application_name,_client_id,_and_secret.html) section of this guide.

   ![oko1563995370176](_images/oko1563995370176.png)

4. Click **Connect** to proceed. This generates an OAuth 2.0 authorization token and redirects you to Google for authorization.

5. Log on to Google with a Super Administrator account.

   |   |                                                                                                                                                                           |
   | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | If you are already signed on to Google Apps, you will not be asked to sign on again.Please be sure that the account you are signed in under is an administrative account. |

6. On successful login, you are redirected to Google's OAuth authorization screen, where you'll be asked to grant access to the scopes that the Google Workspace Provisioner uses to make requests to the Google Admin SDK.

7. Once you grant access on the OAuth authorization screen, you will be redirected to the OCS and presented with an authorized Access Token and Refresh Token to use when configuring the Google Workspace Provisioner.

   |   |                                                                                                                                                      |
   | - | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | Only one Refresh Token will be generated per Client ID; so it is important to make note of the Refresh Token presented by the OCS in the final step. |

   |   |                                                                                                                         |
   | - | ----------------------------------------------------------------------------------------------------------------------- |
   |   | If another Refresh Token is required, you will need to obtain a new Client ID and Secret and to use with the OCS again. |

   ![mif1563995370799](_images/mif1563995370799.png)

8. Copy the **Access Token** and **Refresh Token** to use when configuring the Google Workspace Provisioner.