3 ms·

Most serious/"enterprise" users of GCP don't use Google's own systems, but federate Active Directory instead: https://cloud.google.com/architecture/identity/fe

Most serious/"enterprise" users of GCP don't use Google's own systems, but federate Active Directory instead: https://cloud.google.com/architecture/identity/federating-gcp-with-active-directory-introduction https://cloud.google.com/architecture/identity/federating-gc... If you do so, authentication is delegated to AD. And there are other third-party options too: https://cloud.google.com/architecture/identity https://cloud.google.com/architecture/identity

zinekeller 4y ago
So if I'm serious about using GCP, I also need to use an Azure service? And now I understand why most companies either choose to use AWS or stick with Azure (despite its limitations).
- Spooky23 4y ago
  More like if you’re serious about identity, you don’t add another IdP because you added another cloud provider.
  - tapoxi 4y ago
    Are Okta users not serious about identity?
    - Spooky23 4y ago
      If they sign up for GCP and establish a separate pool Google IDs, probably. Using Okta, Google, AzureAD and On-prem AD as your IdP is a reasonable choice. Using all of them is not.
- folmar 4y ago
  AD is not a Azure service. You are confusing it with Azure AD, which is almost entirely different although the two can be set up to be in sync.