Your organization uses Google Workspace for employee accounts and will grow from 100 to 1,000 users. Most users need access to Google Cloud and you must scale securely and simply. What should you do?

The correct approach is to organize users into groups in Cloud Identity and enforce MFA. Since the organization already uses Google Workspace, Cloud Identity is implicitly available and provides a seamless way to manage user identities for Google Cloud. Grouping users simplifies access management, allowing you to assign permissions to groups rather than individual users. Enforcing MFA in Cloud Identity significantly enhances security for all users accessing Google Cloud resources. Migrating users to Active Directory and federating Cloud Identity is overly complex and unnecessary given that Google Workspace is already in use. Enabling identity federation between Cloud Identity and Google Workspace is redundant, as they are already integrated. Using a third-party IdP introduces additional complexity and cost without providing significant benefits over Cloud Identity in this scenario.