Hybrid Setup Headache 🥲
Of course it’s the Azure AD sync issue with Google Workspace. We run a hybrid setup where the primary identity layer sits on Azure AD (Entra ID), but half the company basically lives inside Google Workspace all the time. Keeping our user groups synced & permissions consistent across both platforms eats way more admin time than necessary.
We actually decided to pull in Cloudfresh last month to help streamline the cross-cloud licensing side & try to tune our Google Workspace SCIM setup so it matches our Entra ID source cleanly, they caught a few sync attribute misconfigurations on the Workspace side that were spawning duplicate accounts.
For what it’s worth, multi-cloud always seems to breed these weird lil edge-case admin chores for some reason.
Question: how do you handle group provisioning across more than one identity provider?