A RetroSearch Logo

Home - News ( United States | United Kingdom | Italy | Germany ) - Football scores

Search Query:

Showing content from https://cloud.google.com/iam/docs/workforce-log-in-gcloud below:

Sign in to the gcloud CLI with your federated identity | IAM Documentation

Sign in to the gcloud CLI with your federated identity

Stay organized with collections Save and categorize content based on your preferences.

This document describes how to sign in to the Google Cloud CLI with your federated identity by using a browser-based sign in.

Before you begin
  1. Ensure that your administrator has set up and configured Workforce Identity Federation.

  2. Ensure that you have information that supports one of the following options. Your administrator can provide this information.

Obtain a login configuration file

This section describes how you can obtain a login configuration file that you can use to sign in to the gcloud CLI.

Create a login configuration file

You can use the workload identity pool ID and workload identity pool provider ID to create a login configuration file.

To create the login configuration file, run the following command. You can optionally activate the file as the default for the gcloud CLI by adding the --activate flag. You can then run gcloud auth login without specifying the configuration file path each time.

gcloud iam workforce-pools create-login-config \
    locations/global/workforcePools/WORKFORCE_POOL_ID/providers/PROVIDER_ID \
    --output-file=LOGIN_CONFIG_FILE_PATH

Replace the following:

The file contains contains the endpoints used by the gcloud CLI to enable the browser-based authentication flow and set the audience to the IdP that was configured in the workforce identity pool provider. The file doesn't contain confidential information.

The output looks similar to the following:

{
  "type": "external_account_authorized_user_login_config",
  "audience": "//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID/providers/WORKFORCE_PROVIDER_ID",
  "auth_url": "https://auth.cloud.google/authorize",
  "token_url": "https://sts.googleapis.com/v1/oauthtoken",
  "token_info_url": "https://googleapis.com/v1/introspect",
}
Caution: We recommend that you first ensure that the contents of this file are correct and then safeguard the file—for example, by making it read-only and restricting access with an ACL. The file isn't validated; a malicious actor with write access to this file can change the endpoints and intercept credentials.

To stop

gcloud auth login

from using this configuration file automatically, you can unset it by running

gcloud config unset auth/login_config_file

.

You can now sign in to the gcloud CLI.

Save a login configuration file

You can save credential configuration file contents that were provided to you to a file. Note the path, and then sign in to the gcloud CLI.

Sign in to the gcloud CLI

To sign in to the gcloud CLI with a login configuration file, run the following command:

gcloud auth login --login-config="LOGIN_CONFIG_FILE_PATH"

Replace LOGIN_CONFIG_FILE_PATH with the path to the login configuration file, if you haven't activated this file before. However, if you have previously activated this file using the --activate flag, then you don't need to specify the file again. Instead, run the following command:

gcloud auth login

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-07-02 UTC.

[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-07-02 UTC."],[[["This guide outlines how to sign in to the Google Cloud CLI using a browser-based sign-in with a federated identity."],["You can sign in using workforce identity pool and provider IDs, an existing login configuration file, or provided configuration file contents."],["A login configuration file can be created using `gcloud iam workforce-pools create-login-config`, including the option to activate it as the default with the `--activate` flag."],["To sign in with a login configuration file, use `gcloud auth login --login-config=\"LOGIN_CONFIG_FILE_PATH\"`, or simply `gcloud auth login` if the file has been activated previously."],["The login configuration file should be secured due to the potential risk of credential interception if a malicious actor modifies the file."]]],[]]


RetroSearch is an open source project built by @garambo | Open a GitHub Issue

Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo

HTML: 3.2 | Encoding: UTF-8 | Version: 0.7.4