Professional Cloud ArchitectDemo

By Google · Question Mode

QuestionQ144

Designing for security and compliance

A customer is migrating an existing corporate application from an on-premises data center to Google Cloud Platform. Business owners require minimal disruption to users, and the security team has strict password-storage requirements.

Which authentication strategy should they use?

  • A Use G Suite Password Sync to replicate passwords into Google
  • B Federate authentication via SAML 2.0 to the existing Identity Provider
  • C Provision users in Google using the Google Cloud Directory Sync tool
  • D Ask users to set their Google password to match their corporate password
Explanation

SAML 2.0 federation enables single sign-on through the existing identity provider, so users authenticate with their current corporate credentials. The existing identity provider remains the system that manages passwords and applies its credential policies, avoiding password replication or separate Google passwords. Google Cloud documentation

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!