Regenerate the GCPW token

As an administrator, you can regenerate your organization’s Google Credential Provider for Windows (GCPW) token. The client token allows GCPW to get your GCPW settings from the Google Admin console when a user first signs in. You might want to regenerate the token if an unauthorized person gets your GCPW installation file and you want to prevent your organization’s GCPW settings from exposure. If someone installs GCPW, your configuration settings could be inferred.

When you regenerate the GCPW token:

• Devices that had any user sign in through GCPW aren’t affected when you reset the token. Users can still sign in through GCPW and settings in the Admin console are pushed to the device.
• Any device that has the old token and no user sign in through GCPW won’t get GCPW settings from the Admin console. Additionally, if no GCPW registry settings are set on the device, sign-in is blocked.
• To install GCPW on new devices, download the GCPW installer file again from your Admin console. The file will include the new token.

Regenerate the token

You must be signed in as a super administrator for this task.

1. Sign in with a super administrator account to the Google Admin console.

   If you aren’t using a super administrator account, you can’t complete these steps.

2. Go to  Menu  Devices > Mobile and endpoints > Settings > Windows.
3. Click Google Credential Provider for Windows (GCPW) setupDownload GCPW.
4. Click Regenerate Token and confirm that you want to regenerate the token.

   The token is updated in the Admin console. When you download a new GCPW installation file, it has the regenerated token embedded in it.

5. (Optional) Download a new GCPW installation file to use for new devices.
6. If any devices have GCPW but haven't had a user sign in yet, update the token on those devices. For instructions, continue to the next section.

Update the token on devices

You can update the token on devices that haven't had a user sign in through GCPW in the following ways. We recommend you reinstall GCPW or run the registry file to avoid potential errors in the device's registry settings.