ReleaseBytes
gcp Google Cloud Blog ·

Google Cloud Workforce Identity Federation streamlines AI access

blogaigcpengineerretailgcp-bigquery
feature announcement

Best Buy has adopted Google Cloud's Workforce Identity Federation to allow developers to access cloud resources using their existing Microsoft Entra ID credentials. This move significantly reduces security risks and administrative overhead associated with managing service account keys, enabling more scalable AI and analytics workloads. The solution is now available to all organizations, including those with online billing accounts, and simplifies integration with identity providers like Ping Identity.

  • →Streamline AI workloads with identity federation
  • →Expanded Workforce Identity Federation support for more users
  • →Simplify identity management by replacing service accounts
  • →Key implementation decisions for identity federation
  • →Improve security and auditability for developer access
Features (2) ›
  • Streamline AI workloads with identity federation

    Best Buy successfully implemented Google Cloud's Workforce Identity Federation to manage access for its AI and analytics workloads. This allows developers to use their existing Microsoft Entra ID credentials, eliminating the need for separate identity stores and reducing security risks from service account keys.

  • Expanded Workforce Identity Federation support for more users

    Google Cloud has simplified the setup for Ping Identity users and extended support for Workforce Identity Federation to customers with online billing accounts, making secure, syncless access easier for a wider range of organizations.

Enhancements (2) ›
  • Simplify identity management by replacing service accounts

    The new architecture federates existing Entra ID identities directly into Google Cloud, removing the complexity of managing and rotating service account keys. This provides a more secure and auditable way to grant developers access to BigQuery and other services.

  • Improve security and auditability for developer access

    Developers experience a seamless SSO flow using their corporate credentials, while security and platform teams benefit from a reduced attack surface and clearer audit logs that show individual user actions instead of shared service accounts.

Notes (1) ›
  • Key implementation decisions for identity federation

    Best Buy's implementation involved separating provisioning and SSO applications in Entra ID and carefully placing the automation OU to avoid bootstrapping issues. The stateless nature of Workforce Identity Federation on Google's side was crucial for scalability.

Read the original announcement →

https://cloud.google.com/blog/topics/retail/best-buy-scales-secure-ai-access-with-workforce-identity-federation/

Related releases