Cloud IAM

Revoking active sessions and short-lived credentials for Workforce Identity Federation users (principals) across all clients is generally available.

You can revoke workforce user sessions by using the gcloud CLI or the REST API.

You can use System for Cross-domain Identity Management (SCIM) data as the source for both user and group claims in the OAuth sign-in workflows for Looker.

You can also use Extended Session Length (ESL) when using SCIM.

The Cloud OAuth API (cloudoauth.googleapis.com) is available in Preview.

The Cloud OAuth API ( cloudoauth.googleapis.com ) is available in Preview.

The Identity and Access Management (IAM) Model Context Protocol (MCP) server is generally available.

You can connect to the IAM remote MCP server from AI applications to inspect and manage custom roles and deny policies across your resources.

You can get IAM role suggestions from Gemini programmatically by using the Policy Assist API (Preview).

You can get IAM role suggestions from Gemini programmatically by using the Policy Assist API ( Preview ).

The Agent Identity auth manager and the Agent Identity APIs (agentidentity.googleapis.com and agentidentitycredentials.googleapis.com) are generally available.

The Agent Identity auth manager and the Agent Identity APIs ( agentidentity.googleapis.com and agentidentitycredentials.googleapis.com ) are generally available.