Google Cloud Identity

A unified identity, access, app and endpoint management platform

Free

Cloud Identity is an Identity as a Service (IDaaS) solution that centrally manages users and groups. You can configure it to federate identities between Google and other identity providers, such as Active Directory and Azure Active Directory. We also provide greater control over organization accounts. When developers use personal accounts, like Gmail, they're outside your control. You can manage access and compliance for all domain users. When you adopt Cloud Identity, you create a Cloud Identity account for each of your users and groups. You can then use Identity and Access Management (IAM) to manage access to Google Cloud resources for each Cloud Identity account.

Top Features

Google-grade security

Defend your organization with the BeyondCorp security model and Google’s threat intelligence signals. Control access to SaaS apps, enforce strong multi-factor authentication (MFA) to protect user accounts, manage endpoints, and investigate threats with Security Center.

Meeting you where you are

Transition to digital by integrating your existing systems on a reliable, trusted platform. Extend your on-premises directory to the cloud with Directory Sync, enable access to traditional apps and infrastructure with secure LDAP, and automatically synchronize user information with HR systems of record.

User and IT simplicity

Maximize efficiency by enabling intuitive user experiences on endpoint devices, and unify user, access, app, and endpoint management with a single console. Enable users to access thousands of apps with single sign-on (SSO) and manage their company accounts using the same process as their personal Google accounts.

Account security and MFA

Help to protect users from phishing attacks with Google’s intelligence and threat signals and multi-factor authentication (MFA), including push notifications, Google Authenticator, phishing-resistant Titan Security Keys, and using your Android or iOS device as a security key.

Device security with endpoint management

Improve your company’s device security posture on Android, iOS, and Windows devices using a unified console. Set up devices in minutes and keep your company data more secure with endpoint management. Enforce security policies, wipe company data, deploy apps, view reports, and export details.

Easy app access with SSO

Enable employees to work from virtually anywhere, on any device, with single sign-on (SSO) to thousands of SaaS apps, including Salesforce, SAP SuccessFactors, Google Workspace, and more.

Works with your favorite apps

Cloud Identity integrates with hundreds of cloud applications out of the box—and we’re constantly adding more to the list so you can count on us to be your single identity platform today and in the future.

Digital workspace

Enable employees to set up quickly with a digital workspace—sign in once and access 5000+ apps, including pre-integrated SAML 2.0 and OpenID Connect (OIDC) apps, custom apps, and on-premises apps.

Unified management console

Use a single admin console to manage user, access, app, and device policies, monitor your security and compliance posture with reporting and auditing capabilities, and investigate threats with Security Center.

Automated user provisioning

Reduce administrative overhead involved in managing your users in individual third-party cloud apps by automating user provisioning to create, update, or delete user profile information in one place and have it reflected in your cloud apps.

Hybrid identity management

Increase the ROI of your existing investments by extending your Microsoft Active Directory (AD) users to the cloud with Directory Sync and enabling simpler user access to traditional apps and infrastructure with secure LDAP.

Context-aware access

A core component of Google’s BeyondCorp security model, context-aware access enables you to enforce granular and dynamic access controls based on a user’s identity and the context of the access request, without the need for a traditional VPN.

Account takeover protection

Strengthen user security with Google’s automatic multilayered hijacking protection. Detect anomalous login behavior and present users with additional challenges to prevent account takeovers.

Technical support

Get help when issues arise with 24/7 support from a real person. Phone, email, and chat support is available in 14 languages, included with your Cloud Identity subscription.

Advanced protection program

A constantly evolving and easy-to-use bundle of Google’s strongest account security settings, ensuring that your most at-risk users always have the strongest possible protection.

Bring your own device (BYOD) support

Endpoint management supports and enables BYOD, making it easy to keep your company data safer while letting employees use their favorite personal devices to get work done.

Quick and easy endpoint management deployment

As soon as your employee’s device gets enrolled in endpoint management, all Wi-Fi and email configurations including server-side certificates get pushed to the device instantly.

No agent required

Agentless setup for basic device management offers wipe and inventory controls for all devices in your fleet, with no user setup or disruption.

User-friendly MFA methods

Cloud Identity supports a variety of MFA methods—hardware security keys, phone as a security key, mobile device push notifications, SMS, and voice calls—meaning you can choose the right option for your employees.

Rich MFA auditing and reporting

Monitor employee usage, set alerts, and examine potential risks via detailed reports and audit logs

Easy access to on-premises apps

With secure LDAP, users can securely access traditional LDAP-based apps and infrastructure, using their Cloud Identity credentials.

Automate life cycle management

Provision and deprovision users in real time from a unified admin console.

Additional Information

Terms & Conditions

https://cloud.google.com/product-terms/

https://policies.google.com/privacy

Resources