Purchase: Customer discovers and purchases the SaaS Research Agent on Google Cloud Marketplace
Entitlement: Marketplace notifies the agent backend (via Pub/Sub) with the Order ID
Registration: Customer admin adds the agent in Gemini Enterprise, which calls the DCR endpoint
First Use: On first invocation, Gemini Enterprise prompts the user to authorize via OAuth 2.0
Usage: Gemini Enterprise calls SendMessage/SendStreamingMessage with an access token and software_statement
Identification: The agent identifies the customer from google.order in the software_statement or from the client_id in the Authorization header
Customer Identification
The agent can identify which Marketplace customer is making a request through two methods:
Method
Source
How
software_statement
metadata.software_statement in A2A message
Validate JWT, extract google.order
Authorization header
OAuth access token
Extract client_id, look up mapped order
Usage Tracking
For Marketplace customers, usage is tracked per Order ID:
- Each request is logged with the google.order from the validated software_statement
- Cost tracking in BigQuery associates usage with the Marketplace order
- Usage can be reported to Google Cloud Service Control API for usage-based billing
