Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ168

Configuring access

While migrating your organization’s infrastructure to GCP, many users will need access to the GCP Console. The Identity Management team already has a well-established process for managing users and wants to continue using its existing Active Directory or LDAP server together with the existing SSO password.

What should you do?

  • A Manually synchronize the data in Google domain with your existing Active Directory or LDAP server.
  • B Use Google Cloud Directory Sync to synchronize the data in Google domain with your existing Active Directory or LDAP server.
  • C Users sign in directly to the GCP Console using the credentials from your on-premises Kerberos compliant identity provider.
  • D Users sign in using OpenID (OIDC) compatible IdP, receive an authentication token, then use that token to log in to the GCP Console.
Explanation

Google Cloud Directory Sync synchronizes users and related directory data from an existing Active Directory or LDAP directory to the Google domain, allowing the existing directory to remain the authoritative user-management system. GCDS provisions identities rather than synchronizing passwords; an existing-password SSO experience is provided by configuring federation separately.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!