dbt-labs/dbt-core

[Adapter Auth] BigQuery Workload Identity Federation (WIF) / External OAuth

Chiusa

#14.545 aperta il 23 apr 2026

 (6 commenti) (2 reazioni) (2 assegnatari)Python (1403 fork)batch import
Epicbigqueryhelp wantedtriage

Metriche repository

Star
 (7989 stelle)
Metriche merge PR
 (Merge medio 2g 13h) (46 PR mergiate in 30 g)

Descrizione

Overview

Add support for GCP Workload Identity Federation (WIF) in the dbt-fusion BigQuery adapter.

WIF allows BigQuery authentication to be delegated to an external OIDC provider, enabling keyless auth flows commonly used in CI/CD environments and multi-cloud setups. This is a significant auth method for large BigQuery customers and is blocking Fusion adoption for some of them.

What needs to be implemented

The BigQuery adapter should support the external_oauth / WIF credential path. The reference implementation in dbt-adapters can be found here:

https://github.com/dbt-labs/dbt-adapters/blob/1f3f529dc713f493a74514feb3ab239ed7fc7cf6/dbt-bigquery/src/dbt/adapters/bigquery/credentials.py#L254

Reference

Guida contributor