Workforce Identity Pool Create Login Config

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

A security engineer is configuring Workforce Identity Federation to grant external contractors access to Google Cloud resources using their corporate OpenID Connect (OIDC) identity provider, eliminating the need to synchronize user accounts to Cloud Identity.

After creating the workforce pool and configuring the OIDC provider with the appropriate issuer URL, client ID, client secret, and attribute mappings, the engineer must enable the contractors to authenticate securely through the Google Cloud CLI (gcloud) using interactive browser-based sign-in.

Which command should the security engineer execute to generate the configuration file required for browser-based sign-in?

Execute gcloud config set auth/login_config_file "https://iam.googleapis.com/v1/workforcePools/WORKFORCE_POOL_ID/providers/PROVIDER_ID".

Execute gcloud auth application-default login --scopes="https://www.googleapis.com/auth/cloud-platform" --client-id-file="client_secret.json".

Execute gcloud iam workforce-pools create-cred-config locations/global/workforcePools/WORKFORCE_POOL_ID/providers/PROVIDER_ID --subject-token-type="urn:ietf:params:oauth:token-type:id_token" --credential-source-file="id_token.json" --workforce-pool-user-project="PROJECT_NUMBER" --output-file="config.json".

Execute gcloud iam workforce-pools create-login-config locations/global/workforcePools/WORKFORCE_POOL_ID/providers/PROVIDER_ID --output-file=login.json.

Professional Cloud Security Engineer

Workforce Identity Pool Create Login Config

Related questions