Stay organized with collections
Save and categorize content based on your preferences.
4.1.2 Two-Step Verification (2SV)
Google Ads authorization supports 2-Step Verification (2SV) for Google Ads
accounts. 2SV is optional, so you can choose whether to require all sub-accounts
of your Google Ads MCC account to enable it. Even if you don't require your
users to set up 2SV, they can still activate it in their Google account
settings.
If the user has enabled 2SV, during the OAuth2 authentication flow, Google
prompts the user for 2SV before issuing a refresh token. Once issued, the
refresh token can be used to generate the access token needed in API calls.
Refresh tokens that were issued prior to the user enabling 2-Step verification
remain valid and not encounter an API error.
If you require users to set up 2SV, the error
TWO_STEP_VERIFICATION_NOT_ENROLLED is returned if API calls are made using
access tokens generated from a refresh token that was issued prior to the user
enabling 2-Step verification.
Once the user has enabled 2-Step verification, they can go through the OAuth2
authentication flow again, this time encountering the prompt for the 2-Step
verification. Completing the prompt issues a refresh token that can be used to
issue access tokens that no longer encounter the error when API calls are made
with them.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2024-09-03 UTC."],[[["Google Ads supports optional Two-Step Verification (2SV) for enhanced security, allowing you to mandate its use for all sub-accounts under your Google Ads MCC account."],["If 2SV is enabled, Google prompts the user for verification during the OAuth2 authentication flow before issuing a refresh token for API access."],["If 2SV is required but not enabled, API calls using older refresh tokens will result in an error, prompting the user to enable 2SV for their Google account."],["After enabling 2SV and completing the OAuth2 flow again, a new refresh token is issued, allowing API calls without encountering the 2SV error."]]],["Google Ads supports optional Two-Step Verification (2SV) for accounts. When enabled, during OAuth2 authentication, Google prompts users for 2SV before issuing a refresh token. Pre-existing refresh tokens remain valid unless 2SV is required. If 2SV is required and a pre-existing refresh token is used, the \"TWO_STEP_VERIFICATION_NOT_ENROLLED\" error occurs. The solution is to enable 2SV in the user's Google account and then repeat the OAuth2 flow to generate a new valid refresh token.\n"]]
