Workforce Identity Pool

The GCPWorkforceIdentityPool entity represents a Google Cloud Workforce Identity Pool: an organization-level pool that lets users from an external identity provider (for example Entra ID or Okta) sign in to Google Cloud without a Google account. The identity providers configured in the pool are listed on the Workforce Provider page.

Field	Type	Possible Operators	Description
Guid	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Unique identifier for the entity in Forestall
FSName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Display name used in Forestall
GCPTier	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	GCP tier classification assigned by Forestall
risk	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	Risk score assigned to the entity
ExposurePoint	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	Exposure point score assigned to the entity
Name	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Full resource name of the workforce identity pool.
DisplayName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Display name of the object.
State	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	State of the pool (ACTIVE or DELETED).
Parent	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Parent resource (organization) of the pool.
Disabled	BOOLEAN	N/A (toggle)	Whether the pool is disabled. Users in a disabled pool cannot sign in.
Description	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Description of the object.
Location	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Location (region) of the resource.