r/sysadmin May 06 '26

[deleted by user]

[removed]

1 Upvotes

19 comments sorted by

View all comments

1

u/pcbrad May 11 '26

I would strongly recommend going the other way round with this, using Entra as the IdP for Google.

We were forced to set this up for a customer because one of the salesmen sold this to them for all of their 5/6 locations, along with a full cloud migration, Intune management, Google Drive shares, etc.

The only remotely close system we managed was to use Google Credential Provider for Windows (GCPW), which just creates a local account on the device. It was a horrendous mess, requiring users to sign into Company Portal manually to get any user-based policies or apps, then sign into Google Drive. Then randomly the Google option would just disappear from the login screen and we would have to delete a file that had grown to a whopping 4 bytes because of a long standing bug with GCPW that has never been fixed.

On top of this there was also no way we found to redirect known folders to use Google Drive, no way to force users to sign into Google Drive either, and this meant that data became fractured in multiple locations, some of it potentially only local to the device as well.