Security and Authentication
To protect data from unauthorized access, Database data stores require all connections to be authenticated using the OAuth 2.0 protocol. The Product provides mechanisms that allow you to complete an OAuth 2.0 authentication flow using a personal Google account, a Google service account, or Application Default Credentials. You can also specify an access token or refresh token that you have already generated from the Google Authorization Server, and use those credentials to connect to Google Database.
When you connect to Database using a personal Google account, a Google service account, or Application Default Credentials, the connector automatically initiates an OAuth 2.0 authentication flow. The connector retrieves an access token based on the credentials specified in the connection URL, and then uses the token to authenticate the connection to the database. When you connect using an access token or refresh token, the connector authenticates the connection to Database without going through an OAuth 2.0 authentication flow.
For detailed connector configuration instructions, see Configuring Authentication.
For more information about OAuth 2.0, see "Using OAuth 2.0 to Access Google APIs" in the Google Identity Platform documentation: https://developers.google.com/identity/protocols/OAuth2.
- Configuring Authentication
- Authentication Driver Configuration Options on page 1
- Features
- Installing and Using the Product
- Configuring the Product on page 1
- Driver Configuration Options on page 1