This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Log in to ask a question
Get hands-on experience with 20+ free Google Cloud products and $300 in free credit for new customers.
Log in to ask a question

IAP with Workforce Identity and custom claims

Posted on 02-26-2025 02:59 PM
watkinsn12
Bronze 1
Bronze 1
Reply posted on --/--/---- --:-- AM

We are trying to secure a GKE service using IAP with Workforce Identity Federation. Everything is working, but it is unclear if I am able to configure it so that additional claims from the IdP are passed into the TokenPayload after validating the `x-goog-iap-jwt-assertion` header. We have done the attribute mapping at the provider. We are attempting to get the authenticated user's `given_name`, `family_name`, and `groups` claims/attributes. Previously, we were using IAP with Identity Platform, and those claims were passed through in the token at `gcip.firebase.sign_in_attributes`.

Does anybody know if this is possible?

 

 

0 2 333
0 Likes
2 REPLIES 2
Top Labels in this Space