Professional Cloud Security EngineerConfiguring access within a cloud solution environmentMedium
A media company is developing a new mobile application. They want to allow users to sign in using their existing social media accounts (e.g., Google, Facebook, Twitter) and also support email/password authentication. The solution needs to integrate seamlessly with Google Cloud services for backend processing and secure user data. Which Google Cloud service is best suited for managing these diverse authentication methods?
- AFirebase Authentication
- BCloud Identity
- CWorkforce Identity Federation
- DIdentity Platform
Show answer & explanationAnswer & explanation
Correct answer: D. Identity Platform
Google Cloud Identity Platform is a customer identity and access management (CIAM) service that supports various authentication methods, including social identity providers, email/password, and SAML/OIDC. It's designed for consumer-facing applications and integrates well with Google Cloud.
Why the other options are wrong
- A. Firebase Authentication is indeed a good choice for mobile apps, but Identity Platform is the *Google Cloud* service that provides the underlying technology and broader enterprise features, including multi-tenancy and custom domains, making it a more comprehensive answer for a 'Google Cloud service'.
- B. Cloud Identity manages enterprise identities (employees) and integrates with Google Workspace, not customer-facing applications with social logins.
- C. Workforce Identity Federation is for federating *workforce* identities (employees) from external IdPs, not customer identities for mobile apps.
Google Cloud Identity Platform
Identity Platform is a customer identity and access management (CIAM) service that allows developers to add Google-grade authentication to their applications, supporting various sign-in methods.
- Supports social, email/password, SAML/OIDC authentication.
- Designed for consumer-facing applications.
- Integrates with Google Cloud backend services.
Memory trick: Identity Platform is where customers sign in.