gcp-wif-workforce-scim-token-create-output
Gemini Enterprise workforce SCIM token creation returns the token only at creation; the official method documents OAuth scopes but no IAM permission action.
Where it sits
| location | iam.locations.workforcePools.providers.scimTenants.tokens.create.securityToken |
|---|
| location kind | output_value |
|---|
| data kinds | bearer_token credential |
|---|
| emits edge | ExposesCredential |
|---|
| service | Workload Identity Federation (gcp:wif) |
|---|
Collection recipe
| access mode | creation_response_only |
|---|
| operation | iam.locations.workforcePools.providers.scimTenants.tokens.create |
|---|
| response path | securityToken |
|---|
| encoding | string |
|---|
| params | {"name": "\u003cresource-name\u003e"} |
|---|
References