# iam-windows-authenticator

**Repository Path**: mirrors_GoogleCloudPlatform/iam-windows-authenticator

## Basic Information

- **Project Name**: iam-windows-authenticator
- **Description**: Integration tools for letting workloads authenticate to Google Cloud using IAM workload identity federation
- **Primary Language**: Unknown
- **License**: Apache-2.0
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2022-08-13
- **Last Updated**: 2026-02-28

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# IAM Federation tools

This repository contains tools for letting workloads that run outside of Google Cloud
use [workload identity federation](https://cloud.google.com/iam/docs/workload-identity-federation)
to authenticate to Google Cloud. 

## Token Service

_Token Service_ is an application that lets clients exchange custom credentials against
an ID token that suitable for workload identity federation:

*   Towards a client appliation, the Token Service application acts
    as an Open ID Connect identity provider. Clients can authenticate using
    different authentication flows and can obtain an ID token that
    asserts their identity.
    
*   When you register the _Token Service_ [as a workload identity pool provider](https://cloud.google.com/iam/docs/manage-workload-identity-pools-providers), 
    clients can then use the ID token and exchange it against short-lived Google 
    credentials by using the Google STS.
    
[<img src="doc/images/documentation.png">](https://googlecloudplatform.github.io/iam-federation-tools/token-service/)

## Workload Authenticator for Windows

_Workload Authenticator for Windows (WWAuth)_ lets Windows applications authenticate to Google Cloud using their 
Active Directory Kerberos credentials. The tool automates the process of using Kerberos credentials to authenticate
to Active Directory Federation Services (AD FS), and using the resulting AD FS credential to authenticate to Google Cloud.

Using WWAuth is an alternative to using service account keys
and doesn't require you to manage and store any secrets or keys.

[<img src="doc/images/documentation.png">](https://googlecloudplatform.github.io/iam-federation-tools/wwauth/)
[<img src="doc/images/download.png">](https://github.com/GoogleCloudPlatform/iam-windows-authenticator/releases/latest/download/wwauth.exe)

--- 

_IAM Federation tools is an open-source project and not an officially supported Google product._

_All files in this repository are under the
[Apache License, Version 2.0](LICENSE.txt) unless noted otherwise._