Your organization has implemented synchronization and SAML federation between Cloud Identity and Microsoft Active Directory. You want to reduce the…

Objective: Reduce the risk of Google Cloud user accounts being compromised.

Solution: Implement strong password policies and post-SSO 2-Step Verification using security keys.

Steps:

Step 1: In Active Directory, configure a domain password policy with strong settings (e.g., complexity,

length, expiration).

Step 2: In the Google Admin console, navigate to the Security settings.

Step 3: Enable 2-Step Verification and configure it to use security keys for post-SSO verification.

Step 4: Ensure all users enroll in the 2-Step Verification with security keys.

Using strong password policies in Active Directory along with security keys for 2-Step Verification

post-SSO provides enhanced security against account compromises.

Reference::

Active Directory Password Policies

Google Admin Console 2-Step Verification