Configure Google to auto-provision to Office 365

[Dean_Mantz]

I am wanting to have my current Google setup auto-provision users to our Office 365 domain. The hope is to have Google authenticate the users so we do not need to manually create/manage them in O365.  So, I ask, has anyone successfully set up the SSO/SAML structure following these steps? 

https://apps.google.com/supportwidget/articlehome?hl=en&article_url=https%3A%2F%2Fsupport.google.com...

Any insight will be greatly appreciated!

[Kim_Nilsson]

YES! 🙂

I had help on the M$ side, but I have also checked the documentation, and it's decent and should be enough to make it happen. Do you also plan to have M/O365 users that do not have Google Workspace accounts, and exclusively use M/O365 services, like Exchange (Outlook and Calendar), or will everyone primarily use Google for everything, and only use M/O365 for certain non-office-like stuff?

[Dean_Mantz]

Sorry, for the last response. I have been swamped and did not see a notification that my post had responses. All of my end users will primarily focus on Google but a number of them still "want" apps like Word, Excel, PPT.  

[BrandonB]

Yes, but no auto-provision. We only license a handful of MS users and leverage a group in Azure to provision. +1 on Kim's point that the documentation is good. We hired a 3rd party for Azure setup, as we didn't know it well.

[Dean_Mantz]

Thank you for responding. Is your use of Azure due to the network being MS? My network is SLES. 

[hanker]

I have it set up. 

My users provision from Google to O365 on Azure. By default on the Azure/O365 side, they have no privileges when they get provisioned. I have to manually assign them to a group that has been given the license for O365. A powershell script could take care of this, but I've not made one.

I noticed that Google's instructions don't have any mention of assigning licenses so I've always wondered if I missed a step, but everything works for me as expected once I assign a license to the provisioned user.

[Kim_Nilsson]

Nope, you're doing it right. The automatic provisioning is only to make them exist in AAD.