Professional Cloud ArchitectDemo

By Google · Question Mode

QuestionQ228

Designing and planning a cloud solution architecture

Your company plans to begin using Google Cloud resources but wants to keep its on-premises Active Directory domain controller for identity management.

What should you do?

  • A Use the Admin Directory API to authenticate against the Active Directory domain controller.
  • B Use Google Cloud Directory Sync to synchronize Active Directory usernames with cloud identities and configure SAML SSO.
  • C Use Cloud Identity-Aware Proxy configured to use the on-premises Active Directory domain controller as an identity provider.
  • D Use Compute Engine to create an Active Directory (AD) domain controller that is a replica of the on-premises AD domain controller using Google Cloud Directory Sync.
Explanation

Google Cloud Directory Sync synchronizes Active Directory users and groups into Cloud Identity, while SAML single sign-on delegates authentication to the external identity provider backed by Active Directory. This keeps the on-premises Active Directory environment as the authoritative identity system and avoids synchronizing passwords.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!