> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/gcp-entities/workload-provider.md).

# Workload Provider

The **GCPWorkloadProvider** entity represents a provider inside a [Workload Identity Pool](/forestall/search-and-reports/gcp-entities/workload-identity-pool.md). A provider defines which external identity issuer (OIDC, SAML or an AWS account) the pool trusts. Its attribute condition then decides which of that issuer's identities are accepted.

| Field              | Type    | Possible Operators                                             | Description                                                                                                                |
| ------------------ | ------- | -------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- |
| Guid               | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Unique identifier of the object in Forestall, a combination of the selected scan's GUID and the object's own identifier.   |
| FSName             | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Display name used by Forestall to identify the object.                                                                     |
| Name               | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Full resource name of the workload identity pool provider.                                                                 |
| DisplayName        | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Display name of the object.                                                                                                |
| State              | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | State of the provider (`ACTIVE` or `DELETED`).                                                                             |
| IsDisabled         | BOOLEAN | N/A (toggle)                                                   | Whether the provider is disabled. A disabled provider cannot be used to exchange tokens.                                   |
| IssuerUri          | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | OIDC issuer URI (OIDC providers only).                                                                                     |
| ProviderType       | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Provider type: `OIDC`, `SAML` or `AWS`.                                                                                    |
| AWSAccountID       | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | AWS account ID trusted by the provider (AWS providers only).                                                               |
| risk               | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Risk score calculated by Forestall.                                                                                        |
| Description        | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Description of the object.                                                                                                 |
| Location           | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Location (region) of the resource.                                                                                         |
| AttributeCondition | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | CEL condition that external credentials must satisfy to be accepted. Empty means any identity from the issuer is accepted. |
| GCPTier            | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | GCP tier classification assigned by Forestall.                                                                             |
| ExposurePoint      | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Exposure point score calculated by Forestall.                                                                              |