Google Cloud Certified Cloud-Digital-Leader Question # 63 Topic 7 Discussion

Configure single sign-on in the Google domain

Single sign-on: Whenever a user needs to authenticate, Google Cloud delegates the authentication to Active Directory by using the Security Assertion Markup Language (SAML) protocol. This delegation ensures that only Active Directory manages user credentials and that any applicable policies or multi-factor authentication (MFA) mechanisms are being enforced. For a sign-on to succeed.

https://cloud.google.com/architecture/identity/federating-gcp-with-active-directory-introduction

Reference Link- https://cloud.google.com/architecture/identity/single-sign-on