Workforce Providers
Open Unified Identities › Resources, filter Providers to GCP Identities › Workforce Provider, then select a row to open its details. Workforce Providers define how external workforce (human user, e.g., SAML or OIDC identity providers such as Entra ID) identities federate into a Workforce Identity Pool.
Workforce Providers Details
Opening a workforce provider shows the Details, Attribute Condition, and Attribute Mapping tabs. The card title can carry a Tier 0/Tier 2 badge, a provider type badge (SAML or OIDC) and a Disabled badge.
The Details tab contains attributes about the GCP Workforce Provider. The page also includes an Issues panel that lists any security findings related to the provider, along with a Risk score and Exposure Point.
Information
Display Name
The human-readable name of the provider (e.g., Entra-ID).
Name
The full resource path of the provider (e.g., locations/global/workforcePools/workforce-pool-test-2/providers/entra-id).
SAML Provider / OIDC Provider
The provider type (SAML or OIDC).
State
The lifecycle state of the provider (e.g., ACTIVE).
Description
A free-text description of the provider (e.g., test).
Disabled
Indicates whether the provider is currently disabled.
Issuer URI
The URI of the external OIDC issuer, for OIDC providers.
Parent Pool
The workforce identity pool of the provider; links to the pool details.
Location
The location of the provider (e.g., global).
Attribute Condition
Displays the CEL condition used to restrict which external identities may federate through the provider.
Attribute Mapping
Displays the mapping between external identity attributes and Google Cloud attributes in Source Attribute and Target Attribute columns.
Issues
Lists security findings associated with the provider (e.g., Workforce Identity Federation Provider Has No Attribute Condition), each tagged with relevant categories such as Least Privilege or Credential Security, and a severity rating (e.g., High).
Last updated
Was this helpful?