• Mobile working across multiple devices Management expect: • Seamless and Secure Workflow • Readily available access and control Expectations have changed
The Perimeter Has Disappeared Access is no longer limited to your office or your employees... • Vendors • Partners • Contractors • Customers An Elastic perimeter drives productivity and collaboration with faster access to customers.
and not optimized for today’s cloud-first world Existing Approaches Were Built for On-prem Environments... Cumbersome VPNs Inconvenient authentication Limited device access
Mary New hire Admin capabilities Synced into Cloud Directory Registered for 2SV and security key Provisioned into cloud applications Provisioned to HR system Employee experience Company device pre-configured with security policies Access to relevant apps BYOD policy-sync apps and security policies with phone
Departing employee Suspends Mary’s account in HR system Mary’s Cloud Identity account is synced and suspended Mary returns company devices Henry HR Manager
data in your Google domain with your Microsoft®Active Directory® or LDAP server. • Your Google users, groups, and shared contacts are synchronized to match the information in your LDAP server. • The data in your LDAP directory server is never modified or compromised. GCDS is a secure tool that helps you easily keep track of users and groups.
data matches that of your Active Directory or LDAP server. • Allows you to configure rules for custom mapping of users, groups, nonemployee contacts, user profiles, aliases, calendar resources, and exceptions. • Performs a one-way synchronization. Data on your LDAP server is never updated or altered. Active Directory Sync
in your server environment. There is no access to your LDAP directory server data outside your perimeter. • Includes extensive tests and simulations to ensure correct synchronization. • Includes all necessary components in the installation package. • Includes a number of features to keep your data secure. Active Directory Security
and SSO? • Organizations using multiple SaaS products • Google account users (chrome, GCP, maps, etc.) • Mobile users • Organizations that require increased security for accounts and product access Value • Adopt cloud services quicker • Makes employees lives easier • Users more secure • 50% reduction in login-related helpdesk calls • 50% Faster for users to login and use new apps
Flow Single sign on means Mary doesn’t have to remember ID/passwords for each business application Context-aware access based on device-state, means Mary can login to her sensitive finance application only on her company-owned device Context-aware access based on IP address means Mary can’t login to certain apps on public wifi Access granted Access restricted Access restricted Single sign on
resets Password resets Account suspensions Henry HR Manager Helpdesk Team Sally Super Admin Users Apps/ devices Delegate admin to G Suite, GCP and other Google Cloud Services
Work Anywhere, Secure Everywhere Access restricted Access restricted Access granted Controlled access to applications based on context: • Who is the user? • What is the status of their device? • Where are they coming from? • What are they trying to access?
Google Cloud Identity • Unique Features Signature Management Consumer GMail block • Custom Login Page • Built in DLP • SAML • Active Directory Sync • All in one • 5600+ pre-integrated apps • Custom Login Page • Multiple Products • Built in DLP • A La Carte • Active Directory Sync • Mobile App • Native Google Application • Free Version & Premium Version • SAML and OAUTH • GCP • Active Directory Sync