ChrisG.72744 (Customer) asked a question.
Group sync with google best practice or reccomendations
I have been reading through the use of groups in google and okta. There appear to be "issues" or at least idiosyncrasies with the creation of groups in google workspace and pulling them into OKTA. such as this
is the recommendation to create groups in OKTA and push them to Google?
What i am trying to accomplish is pretty basic. I have groups in google i want to use to control RBAC in GCP. Then use these groups for access certification quarterly. Unfortunately the groups are already created by the DevOps team in Google so there may be some re-work if i have to re-do. I would think that creating groups in OKTA and then doing a group push mapping should work no?
Ideas, suggestions?
Hello @ChrisG.72744 (Customer) Thank you for posting on our Community page!
It is not necessary needed to create the group and push it from scratch in Google, But the group does need to be in both places.
When adding a group to be used for group push you have the option to link the Okta group with an existing group in the target application.
Additionally, we do recommend to have the same name for the group in both applications, Google and Okta.
Please also see our doc below:
https://help.okta.com/oie/en-us/content/topics/users-groups-profiles/usgp-about-group-push.htm
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.