You plan to synchronize identities to Cloud Identity from a third-party identity provider (IdP). You discovered that some employees used their corporate email address to set up consumer accounts to…

Question

Options

• AMandate that those corporate employees delete their unmanaged consumer accounts.
• BReconcile accounts that exist in Cloud Identity but not in the third-party IdP.
• CEvict the unmanaged consumer accounts in the third-party IdP before you sync identities.
• DUse Google Cloud Directory Sync (GCDS) to migrate the unmanaged consumer accounts' emails
• EUse the transfer tool to invite those corporate employees to transfer their unmanaged consumer

• A
  16% (8)
• B
  75% (38)
• C
  4% (2)
• D
  6% (3)

Explanation

Two actions are needed. First (E): Google provides a Transfer Tool for Unmanaged Accounts that lets the organization invite employees to transfer their unmanaged consumer Google accounts (created with corporate emails) into organizational control - this gives the org control over configuration, security, and lifecycle of those accounts. Second (B): After syncing with the IdP, you should reconcile accounts that exist in Cloud Identity but have no matching entry in the IdP - these are orphaned or legacy managed accounts that could represent a security risk and need to be reviewed or deprovisioned. Option A (mandating deletion) is disruptive and loses account data/history. Option C doesn't apply because consumer accounts live on Google, not in the third-party IdP. Option D (GCDS) syncs directory data from LDAP/AD - it does not migrate unmanaged consumer accounts.

No community discussion yet for this question.