{"id":15221571,"url":"https://github.com/googlecloudplatform/iam-federation-tools","last_synced_at":"2025-10-20T00:32:31.763Z","repository":{"id":56782820,"uuid":"523904246","full_name":"GoogleCloudPlatform/iam-federation-tools","owner":"GoogleCloudPlatform","description":"Integration tools for letting workloads authenticate to Google Cloud using IAM workload identity federation","archived":false,"fork":false,"pushed_at":"2024-12-12T11:15:32.000Z","size":1011,"stargazers_count":9,"open_issues_count":6,"forks_count":4,"subscribers_count":15,"default_branch":"master","last_synced_at":"2024-12-18T08:40:56.768Z","etag":null,"topics":["active-directory","federation","google-cloud","iam","kerberos"],"latest_commit_sha":null,"homepage":"","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/GoogleCloudPlatform.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-08-12T00:10:23.000Z","updated_at":"2024-11-20T04:40:05.000Z","dependencies_parsed_at":"2023-09-02T06:30:36.158Z","dependency_job_id":"303855c6-34fe-4d9e-9301-9faf281407e3","html_url":"https://github.com/GoogleCloudPlatform/iam-federation-tools","commit_stats":null,"previous_names":["googlecloudplatform/iam-windows-authenticator"],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleCloudPlatform%2Fiam-federation-tools","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleCloudPlatform%2Fiam-federation-tools/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleCloudPlatform%2Fiam-federation-tools/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoogleCloudPlatform%2Fiam-federation-tools/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/GoogleCloudPlatform","download_url":"https://codeload.github.com/GoogleCloudPlatform/iam-federation-tools/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":237236958,"owners_count":19277082,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["active-directory","federation","google-cloud","iam","kerberos"],"created_at":"2024-09-28T15:05:58.705Z","updated_at":"2025-10-20T00:32:31.051Z","avatar_url":"https://github.com/GoogleCloudPlatform.png","language":"C#","funding_links":[],"categories":[],"sub_categories":[],"readme":"# IAM Federation tools\n\nThis repository contains tools for letting workloads that run outside of Google Cloud\nuse [workload identity federation](https://cloud.google.com/iam/docs/workload-identity-federation)\nto authenticate to Google Cloud. \n\n## Token Service\n\n_Token Service_ is an application that lets clients exchange custom credentials against\nan ID token that suitable for workload identity federation:\n\n*   Towards a client appliation, the Token Service application acts\n    as an Open ID Connect identity provider. Clients can authenticate using\n    different authentication flows and can obtain an ID token that\n    asserts their identity.\n    \n*   When you register the _Token Service_ [as a workload identity pool provider](https://cloud.google.com/iam/docs/manage-workload-identity-pools-providers), \n    clients can then use the ID token and exchange it against short-lived Google \n    credentials by using the Google STS.\n    \n[\u003cimg src=\"doc/images/documentation.png\"\u003e](https://googlecloudplatform.github.io/iam-federation-tools/token-service/)\n\n## Workload Authenticator for Windows\n\n_Workload Authenticator for Windows (WWAuth)_ lets Windows applications authenticate to Google Cloud using their \nActive Directory Kerberos credentials. The tool automates the process of using Kerberos credentials to authenticate\nto Active Directory Federation Services (AD FS), and using the resulting AD FS credential to authenticate to Google Cloud.\n\nUsing WWAuth is an alternative to using service account keys\nand doesn't require you to manage and store any secrets or keys.\n\n[\u003cimg src=\"doc/images/documentation.png\"\u003e](https://googlecloudplatform.github.io/iam-federation-tools/wwauth/)\n[\u003cimg src=\"doc/images/download.png\"\u003e](https://github.com/GoogleCloudPlatform/iam-windows-authenticator/releases/latest/download/wwauth.exe)\n\n--- \n\n_IAM Federation tools is an open-source project and not an officially supported Google product._\n\n_All files in this repository are under the\n[Apache License, Version 2.0](LICENSE.txt) unless noted otherwise._\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgooglecloudplatform%2Fiam-federation-tools","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgooglecloudplatform%2Fiam-federation-tools","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgooglecloudplatform%2Fiam-federation-tools/lists"}