Grant Domain-wide Delegation Setup

Learn how to grant domain-wide delegation to itopia Labs in your Google Workspace organization

Craig Medland avatar
Written by Craig Medland
Updated over a week ago

itopia Labs supports deep integration with Google Workspace to simplify assigning students and instructors to Classes. To support this integration, your Google Workspace administrator must grant domain-wide delegation access to itopia Labs; this allows Labs to securely read a subset of user, group, and Google Classroom information from your Workspace environment. This access is read-only and scoped to the minimal set of information.

When you first set up your District, you'll be prompted to configure domain-wide delegation. You'll need to configure this delegation before you can assign students and instructors to Classes.

Configure Domain-wide Delegation

  1. Login to the Google Workspace Admin Console (admin.google.com) as a Super Administrator.

  2. Navigate to Security » API Controls. You can use the following link to access this location directly: Google Workspace API Controls.

  3. In the Domain wide delegation section, click Manage Domain-wide Delegation.

  4. Click Add new.

  5. In the configuration pane, specify the following:

    1. Client ID:

      102628712181650693336
    2. OAuth Scopes:

      https://www.googleapis.com/auth/admin.directory.user.readonly, https://www.googleapis.com/auth/admin.directory.group.member.readonly, https://www.googleapis.com/auth/admin.directory.group.readonly, https://www.googleapis.com/auth/classroom.courses.readonly, https://www.googleapis.com/auth/classroom.rosters.readonly, https://www.googleapis.com/auth/classroom.profile.emails
  6. Click Authorize.

That's it! You can now return to the Labs Admin Portal to continue configuring your Classes.

Screenshots

Google Admin Console: Security » API Controls

Domain-wide Delegation screen

Add new delegation prompt:

Did this answer your question?