Constructs a new OAuth brand for the project if one does not exist. The created brand is "internal only", meaning that OAuth clients created under it only accept requests from users who belong to the same Google Workspace organization as the project. The brand is created in an un-reviewed status. NOTE: The "internal only" status can be manually changed in the Google Cloud Console. Requires that a brand does not already exist for the project, and that the specified support email is owned by the caller.
HTTP request
POST https://iap.googleapis.com/v1/{parent=projects/*}/brands
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-06-17 UTC."],[[["\u003cp\u003eThis document describes how to create a new OAuth brand within a Google Cloud project, specifically one that is "internal only" and un-reviewed, accepting requests only from users within the same Google Workspace organization.\u003c/p\u003e\n"],["\u003cp\u003eThe creation of a new OAuth brand is done via a POST request to the \u003ccode\u003ehttps://iap.googleapis.com/v1/{parent=projects/*}/brands\u003c/code\u003e endpoint, utilizing gRPC Transcoding syntax.\u003c/p\u003e\n"],["\u003cp\u003eThe request requires a \u003ccode\u003eparent\u003c/code\u003e path parameter specifying the GCP project, and the user must have the \u003ccode\u003eclientauthconfig.brands.create\u003c/code\u003e IAM permission on the specified project.\u003c/p\u003e\n"],["\u003cp\u003eThe request and response bodies will contain an instance of the Brand resource.\u003c/p\u003e\n"],["\u003cp\u003eAuthorization for creating a brand requires the \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-platform\u003c/code\u003e OAuth scope.\u003c/p\u003e\n"]]],[],null,["# Method: projects.brands.create\n\n- [HTTP request](#body.HTTP_TEMPLATE)\n- [Path parameters](#body.PATH_PARAMETERS)\n- [Request body](#body.request_body)\n- [Response body](#body.response_body)\n- [Authorization scopes](#body.aspect)\n- [Try it!](#try-it)\n\nConstructs a new OAuth brand for the project if one does not exist. The created brand is \"internal only\", meaning that OAuth clients created under it only accept requests from users who belong to the same Google Workspace organization as the project. The brand is created in an un-reviewed status. NOTE: The \"internal only\" status can be manually changed in the Google Cloud Console. Requires that a brand does not already exist for the project, and that the specified support email is owned by the caller.\n\n### HTTP request\n\n`POST https://iap.googleapis.com/v1/{parent=projects/*}/brands`\n\nThe URL uses [gRPC Transcoding](https://google.aip.dev/127) syntax.\n\n### Path parameters\n\n### Request body\n\nThe request body contains an instance of [Brand](/iap/docs/reference/rest/v1/projects.brands#Brand).\n\n### Response body\n\nIf successful, the response body contains a newly created instance of [Brand](/iap/docs/reference/rest/v1/projects.brands#Brand).\n\n### Authorization scopes\n\nRequires the following OAuth scope:\n\n- `https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authentication Overview](/docs/authentication#authorization-gcp)."]]
