5

Understanding Google Cloud Identity

In this chapter, we will look at Google Cloud Identity, which is Google’s Identity as a Service (IDaaS) and Enterprise Mobility Management (EMM) product. We will cover aspects such as directory management, how to create and manage user accounts and groups, and how to sync directory services such as Active Directory using Google Cloud Directory Sync (GCDS). There are other features and services that will be covered, including Single Sign-On (SSO) and device and application management.

Furthermore, we will look at how you can use Google Cloud Identity to enforce 2-step verification (2SV), password management, session management, and reporting and admin log activity. As the topics within Cloud Identity are very broad and cover some aspects that are related to Google Workspace (formerly known as G Suite), we will limit our discussion in this chapter to the topics that are relevant to the Google Professional Cloud Security Engineer exam...