https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/cloud-identity-help-understanding-use-case/m-p/148649#M4116 <P>A Cloud Identity user can definitely use SAML from Google to log in elsewhere, and probably from elsewhere into Google too. However, Education doesn't have Cloud Identity, so you would have to have a separate Workspace account for that.</P> Wed, 07 May 2025 11:21:47 GMT Kim_Nilsson 2025-05-07T11:21:47Z https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/cloud-identity-help-understanding-use-case/m-p/133486#M3903 <P>Our current setup is: HCM/SIS feeds AD, AD then syncs to our SSO platform (Onelogin) and also our provisioning tool creates their Google accounts (may look more into GCDS depending on this discussion). Users in the SSO platform have RBAC to SAML apps.&nbsp;</P><P>Would Cloud Identity (free or paid) remove the need for our current SSO platform (which has all our SaaS apps via SAML)?</P><P>Would the conversion be: HCM/SIS feeds AD, AD feeds Google (GCDS), and then our apps SSO/SAML apps are configured in Cloud Identity?</P><P>Does anyone know the limitations of the SAML configurations within Cloud Identity? I know Google Workspace SAML is limited and doesn't support some types like Shiboleth last I checked, so we can't as of now migrate SAML apps into GW&nbsp;</P> Thu, 06 Mar 2025 14:08:58 GMT https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/cloud-identity-help-understanding-use-case/m-p/133486#M3903 alexgrutza 2025-03-06T14:08:58Z https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/cloud-identity-help-understanding-use-case/m-p/148649#M4116 <P>A Cloud Identity user can definitely use SAML from Google to log in elsewhere, and probably from elsewhere into Google too. However, Education doesn't have Cloud Identity, so you would have to have a separate Workspace account for that.</P> Wed, 07 May 2025 11:21:47 GMT https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/cloud-identity-help-understanding-use-case/m-p/148649#M4116 Kim_Nilsson 2025-05-07T11:21:47Z