Google Cloud → AWS and Azure
AWS and Azure equivalents of Workforce Identity Federation
The closest AWS equivalent of Google Cloud Workforce Identity Federation is AWS IAM Identity Center; on Azure, Microsoft Entra ID.
About Workforce Identity Federation
| Provider | Google Cloud |
|---|---|
| Status | Generally available |
| What it is | Lets users from an external IdP access Google Cloud with SSO, without syncing accounts. |
| Documentation | docs.cloud.google.com |
| Pricing | No separate pricing page |
Mappings (1)
| Capability | AWS | Match (GCP vs AWS) | Azure |
|---|---|---|---|
| Workforce single sign-on and MFA | AWS IAM Identity Center | Direct match | Microsoft Entra ID |
Workforce single sign-on and MFA Direct match
IAM Identity Center maps to Cloud Identity (users, groups, 2-Step Verification, and SSO) or Workforce Identity Federation, which lets users from an external IdP sign in without account sync.
- Cloud Identity can also act as an IdP for third-party SAML apps.
- Workforce Identity Federation is sync-less; Cloud Identity can sync from Active Directory or another IdP.