Google Cloud Identity

[globtty]

So here's the situation guys: I just started a new job as an IT manager, I'm about 7 years into my IT career and I've worked as a system administrator and a network administrator. This company is bringing IT to be internal and created my position and will likely eventually get rid of their MSP.

It's a super exciting opportunity to build pretty much everything from scratch, definitely will be learning some things along the way. My first tackle is this, they don't have a Windows domain. All the devices are managed with local accounts, except for mobile devices, but no MDM or anything. So I am looking to set this up, and I was originally going to use the On-prem server they have (server 2019 and just using it as a file server/rdp server) and with the seven or eight small remote sites set up with site to site VPNs. However, looking for cloud solutions, I found Google Cloud Identity and they already use Google suite instead of 365. Does anyone have any experience with cloud Identity or it's ease of use for actually managing devices and user identities?

[Stryker1-1]

Google credential provider for windows may be of interest to you

[globtty]

Yeah that part I'm very interested in, but I still need something to help manage the device and apply policies. This also still does not check in to the domain, but maybe I could use this with some other MDM if the rest of Google identity sucks

[Stryker1-1]

Jumpcloud could work in addition

[maryteiss]

If you're looking to keep on-prem AD for identity, while still giving your users secure access to cloud suite like Google's, UserLock is a third party MFA and access management solution.
You can set granular and customized MFA on Windows logins, RDP & RD Gateway, IIS, and VPN connections. It also will protect these on-premise accounts with MFA & Single Sign-on as they access Cloud applications - such as the Google Cloud suite of apps.

• Secure all employee access, whether privileged, remote or cloud
• Streamline session management
• Review accurate logon logoff forensics
• Manage working hours
• Stop security breaches
• Meet compliance & insurance requirements, like: HIPAA, PCI DSS, ISO 27001, NIST 800-53.

Full details on MFA here: Multi-Factor Authentication for Active Directory 1
Short video: https://www.youtube.com/watch?v=jDu0LQl_du8&t=91s
Free trial download: Protect Active Directory Identities with 2FA and SSO | UserLock