gcloud iap oauth-clients reset-secret

NAME
gcloud iap oauth-clients reset-secret - reset a Cloud IAP OAuth client secret
SYNOPSIS
gcloud iap oauth-clients reset-secret(NAME :--brand=BRAND)[GCLOUD_WIDE_FLAG]
DESCRIPTION
(DEPRECATED) This command is deprecated and will be non-functionalafter the IAP OAuth Admin APIs are turned down. Jan 19, 2026: Google willdiscontinue support for the IAP OAuth Admin APIs. New projects will not be ableto use these APIs. March 19, 2026: The IAP OAuth Admin APIs will be permanentlyshut down. Access to this feature will no longer be available.

gcloud iap oauth-clients reset-secret is used to reset a Cloud IAPOAuth client secret. Note this command cannot be used to reset the secret forany other type of OAuth client in your project.

EXAMPLES
To reset a Cloud IAP OAuth client secret, run:
gcloudiapoauth-clientsreset-secretNAME

To reset a Cloud IAP OAuth client secret for a specific brand, run:

gcloudiapoauth-clientsreset-secretNAME--brand=BRAND
POSITIONAL ARGUMENTS
Proxy client resource - Name of the Cloud IAP OAuth client whose secret will bereset. The arguments in this group can be used to specify the attributes of thisresource. (NOTE) Some attributes are not given arguments in this group but canbe set in other ways.

To set theproject attribute:

  • provide the argumentname on the command line with a fullyspecified name;
  • provide the argument--project on the command line;
  • set the propertycore/project.

This must be specified.

NAME
ID of the proxy client or fully qualified identifier for the proxy client.

To set theidentity_aware_proxy_clients attribute:

  • provide the argumentname on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--brand=BRAND
The name of the OAuth brand.

To set thebrand attribute:

  • provide the argumentname on the command line with a fullyspecified name;
  • provide the argument--brand on the command line.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

API REFERENCE
This command uses theiap/v1 API. The full documentation for thisAPI can be found at:https://cloud.google.com/iap
NOTES
These variants are also available:
gcloudalphaiapoauth-clientsreset-secret
gcloudbetaiapoauth-clientsreset-secret

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-09-30 UTC.