1

With regards to authentication and authorization, what does Cloud IAP do that Cloud Endpoints doesn't? (and vice versa?)

Is Cloud IAP doing both Authorization and Authentication? And if so, is it using OAuth to do this?

swigganicks
  • 221
  • 3
  • 8

1 Answers1

2

Cloud IAP is an access management tool that allows people to use their internal business apps without requiring to connect to a VPN. It is based on the context such as the IP address of the client or type of the request. As per the architectural concept of Cloud IAP it does perform 'Authenticaion' and 'Authorization' . When you turn on Cloud IAP for a resource, it automatically creates an OAuth 2.0 client ID and secret. If you delete the automatically generated OAuth 2.0 credentials, Cloud IAP won't function correctly.

Cloud Endpoints on the other hand is simply used to manage your APIs by basically allowing developers to generate their own keys. It uses Auth0 and Firebase authentication. To get more understanding about Cloud Endpoints, you could also review its 'Architecture' as well.

Digil
  • 268
  • 1
  • 9
Pranay Nanda
  • 151
  • 6