Google Professional Cloud Developer Question 120
Single answerGoogle Cloud PlatformYou are developing a web application that requires end-user authentication. The application must support multiple identity providers, such as Google, Facebook, and email/password-based authentication. Additionally, you need to ensure that user accounts are securely stored and managed. Which solution should you choose?
- A
Use Identity Platform to enable multiple identity provider integrations and manage user accounts.
- B
Manually implement OAuth2 integrations for each identity provider and store user account data in Firestore.
- C
Deploy an open-source identity management solution, like Keycloak, using Google Kubernetes Engine (GKE).
- D
Use Firebase Authentication with a manually written backend to integrate identity providers.
Show answer and explanation
Correct answer: A
Explanation
Identity Platform is a fully managed authentication service on Google Cloud that supports multiple identity providers, secure user account management, and advanced security features. It is specifically designed for scalability and ease of integration, making it the best fit for this scenario. Other options either require significant manual effort or lack the enterprise-grade capabilities of Identity Platform.
- A. Correct.
Identity Platform is the appropriate choice for this scenario as it provides out-of-the-box support for multiple identity providers (Google, Facebook, etc.), secure storage of user accounts, and scalable authentication management.
- B. Incorrect.
Manually implementing OAuth2 integrations and managing user account data in Firestore is error-prone, time-consuming, and lacks the scalability and security features provided by Identity Platform.
- C. Incorrect.
While Keycloak is a valid open-source identity management solution, it requires significant setup and maintenance, making it less suitable for a managed, cloud-native solution compared to Identity Platform.
- D. Incorrect.
Firebase Authentication does allow for integrating identity providers, but it lacks some of the enterprise-grade features and flexibility of Identity Platform, such as the ability to integrate with existing identity systems or advanced security features.