I know it's unidirectional. I was saying that we'd mostly make our changes internally and push it to Google and centralize user/group management using our inter

I know it's unidirectional. I was saying that we'd mostly make our changes internally and push it to Google and centralize user/group management using our internal on-site LDAP server. The idea of an external tool modifying our local LDAP/AD server is not something we'd go for. I suspect other people might feel the same way. However, if we were smaller (or didn't have internal IT resources) like a lot of clients we work with, an external LDAP/Google apps combo sounds like a winning solution :)