Posts on Identity, access, and stuff - Johannes Passing's blog about IAM · Scour

AI Agent Authenticator, a new tool to simplify delegating access to Gemini Enterprise agents

jpassing.com·7w

Letting users delegate access from Gemini Enterprise to Agent Engine

jpassing.com·16w

The many types of tokens used by Google Cloud

jpassing.com·37w

Managing break-glass access to Google Cloud

jpassing.com·40w

Using JIT Groups to manage just-in-time, self-service access to Kubernetes resources

jpassing.com·43w

Securing apps and resources on Google Cloud using context-aware access

jpassing.com·43w

Using domain-wide delegation without service account keys, Java edition

jpassing.com·60w

Given an OAuth Client ID, how to find the corresponding Google Cloud project

jpassing.com·60w

Using Workforce Identity Federation and Entra App roles to control access to Google Cloud

jpassing.com·60w

JIT Groups, or what's next for the JIT Access project

jpassing.com·88w

Using libssh2 with CryptoNG and ECDSA

jpassing.com·103w

Best practices for securing SSH access to VM instances

jpassing.com·103w

Consent screens and the impact of administrative controls

jpassing.com·108w

Authenticating to Google Cloud from Azure App Services

jpassing.com·112w

Microsoft recommending IAP Desktop

jpassing.com·113w

Using Integrated Windows Authentication over a Google Cloud load balancer

jpassing.com·118w

Authenticating to Google Cloud from an AWS Lambda function

jpassing.com·126w

Authenticate workloads and devices to Google Cloud using mTLS

jpassing.com·141w

Extending a platform or service to support workload identity federation

jpassing.com·161w

Using one OAuth client to get ID tokens for another client

jpassing.com·169w

Log in to enable infinite scrolling