Using domain-wide delegation without service account keys, Java editionSome Google APIs don’t support service accounts. To use them in an unattended scenario, we have to use domain-wide delegation. That adds some complexity, but doesn’t require a service account key. Continue »
Given an OAuth Client ID, how to find the corresponding Google Cloud projectThe Client Id gives it away, mostly. Continue »
Using Workforce Identity Federation and Entra App roles to control access to Google CloudManaging access to Google Cloud resources at scale is difficult without groups. But passing group memberships from Entra ID to Google Cloud comes with its own set of challenges, and a better option is to use App roles. Continue »