Syncing between Azure AD and Google, plus passwords

Question

Syncing between Azure AD and Google, plus passwords

Ryan B Cooley 51

We have an Azure and Google presence where users are replicated to both from AD using each company's replication tools. I'd like to change this.

Is there a way to replicate users, with their password hashes, to Google from Azure? Almost like a cloud to cloud automatic sync? Like if a user gets modified in Azure, I want it to automatically sync those changes to Google. It could be push or pull. I also want password hashes synced if there is a password change, as Google seems to require this, much like Azure.

We use Entra ID sync with password sync enabled between AD and Azure.

We do not want to add Azure Domain Services, at this time.

Givary-MSFT 35,786 Reputation points Microsoft Employee Moderator

2024-11-26T04:47:09.7166667+00:00

@Ryan B Cooley Just checking in to see if below information was helpful. If you have any further updates on this issue, please feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.

Answer accepted by question author

0 additional answers

Your answer

Givary-MSFT 35,786 Reputation points Microsoft Employee Moderator

2024-11-26T04:47:09.7166667+00:00

@Ryan B Cooley Just checking in to see if below information was helpful. If you have any further updates on this issue, please feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.

Answer 1

Thameur-BOURBITA 36,526 Moderator

Hi @Ryan B Cooley

You can sync user account from EntraID to google by following these steps mentioned in the link below but this automatic provisioning doesn't include the password sync from Entra ID to google.

In this case you can configure google workplace to delegate authentication to Entra ID to avoid password sync.

How to Configure SSO with Entra ID (formerly Azure AD) and Google Cloud Identity SSO

Please don't forget to accept helpful answer

Ryan B Cooley 51 Reputation points

2025-01-07T23:19:59.8466667+00:00

This makes sense.

I've been researching all over the place and it looks like password sync is just not a thing. I'm in touch with Google to see if we even get anything from syncing passwords and if we can turn that "feature" off.

As for the SCIM method. The document you listed looks helpful. I will definitely use that knowledge when it comes time to test out this configuration on a Google test environment and play around with it until we get it to do what we need.

Share via

Syncing between Azure AD and Google, plus passwords

0 additional answers

Your answer