AAD & G Suite Question

Question

I just have a simple question. I work for a school district and we use G Suite for email, device management, etc. We are a Mac district and wanting to make a switch to Azure AD for domain services. I know that we can setup Azure AD to interface with G Suite, create groups and users...but was wondering if I could migrate all Google OU's and users to Azure and vice versa. Needing to migrate to Azure AD for some services we have here on campus. Any help would be greatly appreciated!

Answer 1

You can set up user account synchronization between Azure AD and Google Cloud. https://cloud.google.com/solutions/federating-gcp-with-azure-ad-configuring-provisioning-and-single-sign-on

If you want Google users to be able to access Azure resources, I believe the best way is to use direct federation which allows users to sign in with their Google accounts. https://learn.microsoft.com/en-us/azure/active-directory/b2b/direct-federation

You cannot sync an Azure AD group to a Google group and there is an open feedback item out for this. https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/34461739-sync-azure-active-directory-group-to-google-group

orgUnitPath is now a supported attribute in the Azure AD to G Suite user provisioning connector. You should now be able to add a new mapping for this attribute: https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/customize-application-attributes

If it does not appear automatically, you will need to restore the default mappings as described here: https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/customize-application-attributes#restoring-the-default-attributes-and-attribute-mappings

Let me know if this answers your question or if you need more info!