Skip to content

How can we improve the platform?

← Atlas

Support GCP IAM for Cluster Authentication

Achieve feature parity with AWS IAM cluster authentication support.

85 votes

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close

We’ll send you updates on this idea

Brian shared this idea  ·   ·  Report…  ·  Admin →
completed  ·  AdminFuat (Admin, MongoDB) responded  · 

Your applications can now access Atlas Clusters with Google Service Accounts using MongoDB Workload Identity Federation (https://www.mongodb.com/docs/atlas/workload-oidc/). The feature is supported by MongoDB 7.0.11 dedicated clusters (M10 and above).


For your workforce access, we recommend to use Workforce Identity Federation (https://www.mongodb.com/docs/atlas/workforce-oidc/) with your corporate identity provider.


Thank you for your feedback.

Show previous admin responses (2)

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • Michael Gerlach commented  ·   ·  Report

    This is technically done with MongoDB 7.0 and OIDC authentication through Identity Federation.

  • ilyas bouallal commented  ·   ·  Report

    I agree with @fulton

    Prioritizing Workload Identity Federation (IAM) is most valuable.

  • ilyas bouallal commented  ·   ·  Report

    Hello, also requesting this.

    Since MongoDB Atlas doesn't support crossproject service accounts, this raise security and responsibility issues over the service account keys in our organization.
    Workforce Identity Federation is needed to prevent this.

    Best Regards,
    Ilyas

  • Fulton Byrne commented  ·   ·  Report

    The current ordering priority is not ideal.

    Generally we do not want individual users accessing the database, so why are you prioritizing Workforce Identity Federation to access clusters using SSO? If a user needs to access a cluster directly (in an emergency) it's maybe once every few years.

    The highest imperative is for application to access databases securely. The application has the highest access and security needs. Therefore prioritizing Workload Identity Federation (IAM) is most valuable. IAM access makes it easier for developers to build new applications to work with the database (instead of touching the database directly).

    Why is Atlas choosing to support Workforce Identity Federation first?

  • Dimitri Stiliadis commented  ·   ·  Report

    Last secret in our deployment that we need to get rid off. This would be a tremendous help.

  • Fulton Byrne commented  ·   ·  Report

    Would be very nice to have this so we can use workload identity in GCP GKE clusters to eliminate yet another credential to distribute.

  • ion commented  ·   ·  Report

    yessssssssssss
    we want this

Atlas: IAM

Categories

Feedback and Knowledge Base

(thinking…)