With Workforce Identity Federation, users in your external identity provider (IdP) can use single sign-on (SSO) to access Google Cloud resources. See public docs.

Guide for client integration at go/workforce-pools-client-support.