« Back to home

Authenticating to Google Cloud by using an Azure managed identity and workload identity federation

When an application running on Azure needs access to Google APIs, we can use workload identity federation to let the application use its Azure credentials to authenticate to Google APIs. Unfortunately, the C# client library doesn’t support that yet, but we can fill that gap. Continue »

Restricting which managed identities can access an Azure application

On Azure, we can use managed identities and AzureAD applications to authenticate service-to-service authentication. But how can we ensure that only certain managed identities can obtain access tokens for an application? Continue »

About Johannes

Johannes Passing lives in Melbourne, Australia, and works as a Staff Solutions Architect at Google Cloud where he helps customers around the globe make the most of Google Cloud IAM to secure their identities and resources.

Johannes also maintains several open-source projects and is the author of many security best practices published on the Google Cloud website.

Besides IAM, Johannes has a passion for software architecture and lean software development.

Johannes holds an M.Sc. in software systems engineering from Hasso Plattner Institute, is a Google-certitified Professional Cloud Architect and Professional Cloud Security Engineer and is ITILv3- and PRINCE2-certified.

Any opinions expressed on this blog are Johannes' own.

Contact Johannes at jpassing (at) hotmail com