Skip to main content
Answer

OAuth2 with GCP gcloud

  • May 8, 2025
  • 2 replies
  • 74 views

dude
Byte
Forum|alt.badge.img+16

When configuring authentication for a bucket using oauth, Commvault provides straight forward steps however when looking into gcloud parameters, what should be entered in the "REDIRECT_URI" 

https://cloud.google.com/iam/docs/workforce-manage-oauth-app#create 

gcloud iam oauth-clients create APP_OAUTH_CLIENT_ID \
    --project=PROJECT_ID \
    --location=global \
    --client-type="CONFIDENTIAL_CLIENT" \
    --display-name="My OAuth application" \
    --description="An application registration for MyApp" \
    --allowed-scopes="https://www.googleapis.com/auth/cloud-platform" \
    --allowed-redirect-uris="REDIRECT_URI" \
    --allowed-grant-types="authorization_code_grant"

 

Thanks

Best answer by kkarthikk

Hi ​@dude,

 

In Commvault, when setting up Google Cloud Storage (GCS) as a storage target with OAuth 2.0 authentication, the parameter --allowed-redirect-uris="REDIRECT_URI" is not relevant. Commvault employs service account authentication for GCS integration, which eliminates the need for user consent or redirect URIs.

Commvault offers two main methods for integrating with Google Cloud Storage: Access & Secret Keys (Interoperability Mode), which utilizes GCS access and secret keys for authentication, and OAuth 2.0 (Service Account Mode), which uses the credentials of a service account (usually in JSON format) to authenticate and authorize access to GCS.

Please let me know incase of any further queries.

 

Regards,

Karthik

2 replies

Forum|alt.badge.img+5
  • Vaulter
  • Answer
  • May 12, 2025

Hi ​@dude,

 

In Commvault, when setting up Google Cloud Storage (GCS) as a storage target with OAuth 2.0 authentication, the parameter --allowed-redirect-uris="REDIRECT_URI" is not relevant. Commvault employs service account authentication for GCS integration, which eliminates the need for user consent or redirect URIs.

Commvault offers two main methods for integrating with Google Cloud Storage: Access & Secret Keys (Interoperability Mode), which utilizes GCS access and secret keys for authentication, and OAuth 2.0 (Service Account Mode), which uses the credentials of a service account (usually in JSON format) to authenticate and authorize access to GCS.

Please let me know incase of any further queries.

 

Regards,

Karthik


dude
Byte
Forum|alt.badge.img+16
  • Author
  • Byte
  • May 12, 2025

Thank you for clarifying that.