Cloud Identity
Managed directory of users, groups and devices behind Google Cloud accounts.
- Provider
- gcp
- Category
- Security
- Official docs
- https://cloud.google.com/identity/docs/overview
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| authorizationModel | enum | none | rbac | abac | rebac | no | rbac | ▸ none |
| centralised | boolean | — | no | true | ▸ true |
| deviceManagement | enum | basic | advanced | no | basic | inherited |
| edition | enum | free | premium | no | free | inherited |
| externalIdpFederation | boolean | — | no | false | inherited |
| freeUserCap | integer | — | no | 50 | inherited |
| managed | boolean | — | no | true | ▸ true |
| mfa | boolean | — | no | false | ▸ false |
| protocol | enum | oidc | saml | oauth2 | iam | custom | no | oidc | ▸ saml |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "cloud-identity", component: "google-cloud-identity" }Resource Access Managementalibaba-ramAmazon Cognitoaws-cognitoAmazon Cognito identity poolaws-cognito-identity-poolAWS Directory Serviceaws-directory-serviceAWS IAMaws-iamAWS IAM Identity Centeraws-iam-identity-centerAWS IAM Roles Anywhereaws-iam-roles-anywhereAWS Directory Service Simple ADaws-simple-adMicrosoft Azure Attestationazure-attestationMicrosoft Entra Domain Servicesazure-entra-domain-servicesMicrosoft Entra External IDazure-entra-external-idMicrosoft Entra IDazure-entra-idMicrosoft Entra Verified IDazure-entra-verified-idAzure IoT Hub Device Provisioning Serviceazure-iot-dpsManaged identities for Azure resourcesazure-managed-identityCloudflare One identity providercloudflare-one-identity-providerActive Directory Domain Servicesactive-directoryAthenzathenzAuth0auth0AutheliaautheliaauthentikauthentikClerkclerkDexdexFreeIPAfreeipaGeneric identity provideridentity-providerKeycloakkeycloakOAuth2 Proxyoauth2-proxyOktaoktaOpenFGAopenfgaOpenLDAPopenldapOryoryPing Identity Platformping-identitySpiceDBspicedbSPIREspireStytchstytchWorkOSworkosZitadelzitadelFirebase Authenticationgoogle-firebase-authGoogle Identity Platformgoogle-identity-platformManaged Service for Microsoft Active Directorygoogle-managed-microsoft-ad
and 7 more → Identity provider page# yaml-language-server: $schema=../../schema/component.schema.json # Cloud Identity: the managed directory of users, groups and devices behind Google Cloud accounts. # Per "Cloud Identity overview" it federates with external identity providers and feeds IAM; per # "Cloud Identity editions" the Free edition raises the user cap by 50 and carries basic mobile # device management and optional 2-Step Verification, while Premium adds advanced device management # and the security center. schemaVersion: "1" type: "component" id: "google-cloud-identity" kind: "identity-provider" provider: "gcp" docs: "https://cloud.google.com/identity/docs/overview" defaults: protocol: "saml" authorizationModel: "none" centralised: true mfa: false managed: true properties: edition: type: "enum" values: ["free", "premium"] default: "free" freeUserCap: type: "integer" default: 50 deviceManagement: type: "enum" values: ["basic", "advanced"] default: "basic" externalIdpFederation: type: "boolean" default: false