• Default credentials
• Access key file
• Web browser or Single Sign On

DBeaver is integrated with Google Cloud IAM authentication.
Thus it provides the possibility to authenticate in GCP to access your cloud databases.

When you use Default Credentials, Google Cloud will then try to determine credentials by using the standard credential providers chain:

1. Environment variables (GOOGLE_APPLICATION_CREDENTIALS)
2. Identity token from GCP CLI
3. The shared user or service credentials and config files (usually application_default_credentials.json in AppData)
4. Google Compute Engine

Using default credentials is essentially the simplest way to integrate with various SSO providers and web identity providers as they usually provide credentials through config files.

Please read the GCP authentication documentation for a detailed explanation.

You can provide the path to your service credentials or user credentials file in the "Configuration" field.

You can read more about User and Service authentication here

Google Cloud Shell will be used for authentication. If your GCP account has a configured SSO portal, you can use a web-based SSO authorization.