Skip to main content

​
How Harmonia uses it

Firebase Authentication establishes operator identity and workspace membership. IAM service accounts identify Cloud Run and automation workloads. Secret Manager keeps provider credentials server-side; browsers receive neither integration secrets nor machine credentials.

Firebase Authentication

Operator authentication and tenant scope.

IAM service accounts

Machine identity and least privilege.

Secret Manager

Credential storage and delivery.

​
Evidence status

Repository policy and tests verify access checks locally. Production IAM grants, secret versions, and authenticated access must be verified in the target project without exposing secret values.

Firebase Authentication

How Google sign-in establishes Harmonia operator identity and tenant scope.

IAM and service accounts

How Harmonia separates web, worker, Pub/Sub, and Scheduler identities with least privilege.

Secret Manager

How Harmonia supplies provider credentials to Cloud Run without placing secrets in code or client bundles.
Last modified on August 26, 2026