Unexpected behavior in the IAM OAuth Clients group.
When navigating the gcp console to `Google Auth Platform / Clients` & `APIs & Services / Credentials`, I can view multiple records of my `OAuth 2.0 Client IDs`.
Issue:
When I run the following gcloud command in the Cloud Shell Terminal, it responds with: "Listed 0 items."
gcloud iam oauth-clients list --location="global"
Expected Behavior:
For the command to return the records of my OAuth 2.0 Client IDs
Context:
* The cloud shell terminal session was authenticated with the project owner's credentials.
* The cloud shell terminal session project config setting was the same project that the OAuth Credentials are in
* Trying other regions besides `global` returns a 403 error code
* The reverse is also true. When i create an OAuth client using a gcloud command, it is not visible on the gcp console, but i can view it with another gcloud command.(it's not saving to a different project)
Questions:
1. Is this the expected behavior?
2. Why does it return no records?
3. Is there another location besides `global` to set?
4. Is there another gcloud group I should be calling? (besides IAM)
Thank you in advance
Hi @SpaceDandy !
Yes, this is expected — gcloud iam oauth-clients manages Workforce Identity Federation clients, not the standard OAuth 2.0 Client IDs you see under APIs & Services > Credentials.
For regular OAuth 2.0 clients, there’s no direct gcloud command to list them easily; you manage them via gcloud alpha services identity (in limited cases) or the Console UI.
It’s a confusing distinction — you’re not doing anything wrong!
User | Count |
---|---|
2 | |
1 | |
1 | |
1 |