OAuth 2 does have an equivalent to 2-legged, 'Service Accounts<https://developers.google.com/accounts/docs/OAuth2ServiceAccount>'
I have successfully used an oauth service account with some apis (notably email settings, email migration, and gmail imap) but I have not gotten it to work with the read-only provisioning api (the scope with #readonly in it is rejected by the token endpoint). Some python test code can be found here<http://www.contrib.andrew.cmu.edu/~cg2v/unreleased/google-service-account-provapis.py>. some fields need to be filled in at the top, and the service account's private key must be in the working directory when you run the script. The client ID in the code is the service account's 'email address', with an @, but the thing the domain admin puts in their control panel is the client id without @'s -- You received this message because you are subscribed to the Google Groups "Google Apps Domain Information and Management APIs" group. To view this discussion on the web visit https://groups.google.com/d/msg/google-apps-mgmt-apis/-/VbY5RIHfpgsJ. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-apps-mgmt-apis?hl=en.
