While migrating your organization's infrastructure to GCP, a large number of users will need to access GCP Console. The Identity Management team already has a well-established way to manage your…

Question

Options

• AManually synchronize the data in Google domain with your existing Active Directory or LDAP
• BUse Google Cloud Directory Sync to synchronize the data in Google domain with your existing
• CUsers sign in directly to the GCP Console using the credentials from your on-premises Kerberos
• DUsers sign in using OpenID (OIDC) compatible IdP, receive an authentication token, then use that

• A
  3% (1)
• B
  80% (24)
• C
  7% (2)
• D
  10% (3)

Explanation

Google Cloud Directory Sync (GCDS) is the purpose-built tool for synchronizing user accounts, groups, and other data from an on-premises Active Directory or LDAP server into a Google Cloud domain. It is a one-way sync (from AD/LDAP to Google) and allows the Identity Management team to continue managing users in their existing system. Option A (manual sync) is not scalable and error-prone. Option C (Kerberos direct login) is not supported by GCP Console. Option D (OIDC token flow) can be used but requires a separate IdP integration and does not directly leverage the existing AD/LDAP server the way GCDS does.

No community discussion yet for this question.