Google Cloud Identity
cloud.google.com
What it is
Google Cloud Identity centrally manages users and groups as an Identity as a Service solution. It can federate identities between Google and providers such as Active Directory and Microsoft Entra ID, and provides single sign-on to thousands of SaaS applications, including Salesforce, SAP SuccessFactors, and Google Workspace. MFA choices include push notifications, Google Authenticator, Titan Security Keys, security keys, backup codes, SMS, voice calls, passkeys, and other TOTP code generators. Its console manages Android, iOS, and Windows devices, with tools to enforce policies, wipe company data, deploy apps, and view reports. Automated provisioning can create, update, or delete user profile information in third-party cloud applications. Directory Sync extends Active Directory users to the cloud, while Secure LDAP supports traditional applications and infrastructure. Free includes 50 user licenses by default; additional licenses can be requested at no cost. Premium costs $6 a month on an annual fixed-term plan, or $7.20 a month on a flexible plan billed monthly. Premium also lists a 99.9% SLA and 24x7 chat and email support.
Spec sheet
- What it does
- Cloud Identity is Google's identity-as-a-service platform for centrally managing users and groups and federating identities with Active Directory or Microsoft Entra ID.Read 15 Oct 2026 · docs.cloud.google.com
- Purpose
- Cloud Identity centrally manages users and groups as an Identity as a Service solution.Read 30 Sep 2026 · docs.cloud.google.com
- API
- The Cloud Identity API is for provisioning and managing identity resources.Read 30 Sep 2026 · docs.cloud.google.com
- Integrations
- Google lists hundreds of cloud application integrations and thousands of pre-integrated SSO applications, including Salesforce and SAP SuccessFactors.Read 15 Oct 2026 · cloud.google.com
- Support
- The editions page lists 24x7 chat and email support for Premium and Google Cloud Communities for Free.Read 30 Sep 2026 · docs.cloud.google.com
- Agentless management
- Basic device management can operate without an endpoint agent and provides wipe and inventory controls.Read 15 Oct 2026 · cloud.google.com
- App integrations
- Cloud Identity integrates with hundreds of cloud applications out of the box and supports pre-integrated SAML 2.0 and OpenID Connect apps.Read 30 Sep 2026 · cloud.google.com
- Authentication extensibility
- Groups API calls can authenticate as an end user or as a service account, including domain-wide delegation.Read 15 Oct 2026 · docs.cloud.google.com
- Automated provisioning
- Automated user provisioning can create, update, or delete user profile information in third-party cloud apps from one place.Read 30 Sep 2026 · cloud.google.com
- BYOD
- Endpoint management supports bring-your-own-device deployments.Read 15 Oct 2026 · cloud.google.com
- Cloud Identity API
- The Cloud Identity API provisions and manages identity resources.Read 15 Oct 2026 · cloud.google.com
- Cloud resource access
- Cloud Identity accounts can be used with Google Cloud IAM to control access to cloud resources.Read 15 Oct 2026 · docs.cloud.google.com
- Company size
- LinkedIn lists Google as a public software-development company with more than 10,001 employees and headquarters in Mountain View, California.Read 15 Oct 2026 · linkedin.com
- Deprecation
- Cloud Identity POSIX groups were deprecated, with existing groups scheduled for removal on or after September 26, 2025.Read 15 Oct 2026 · docs.cloud.google.com
- Directory synchronization
- Google Cloud Directory Sync extends an on-premises directory into Cloud Identity and synchronizes user information with HR systems.Read 15 Oct 2026 · cloud.google.com
- Documentation depth
- Google publishes guides, REST references, API setup instructions, release notes, support links and code samples for Cloud Identity.Read 15 Oct 2026 · cloud.google.com
- Documentation license
- Cloud Identity documentation is under Creative Commons Attribution 4.0 and its code samples are under Apache 2.0.Read 15 Oct 2026 · docs.cloud.google.com
- Endpoint management
- Administrators can manage Android, iOS and Windows devices, enforce policies, wipe company data, deploy apps, view reports and export details.Read 15 Oct 2026 · cloud.google.com
- Hybrid access
- Google describes Directory Sync for extending Microsoft Active Directory users to the cloud and Secure LDAP for access to traditional apps and infrastructure.Read 30 Sep 2026 · cloud.google.com
- Identity federation
- It can federate identities between Google and providers such as Active Directory and Microsoft Entra ID.Read 30 Sep 2026 · docs.cloud.google.com
- License limit
- The Free edition provides 50 user licenses by default, and additional free licenses can be requested at no cost.Read 30 Sep 2026 · cloud.google.com
- Limit: GCP focus
- Gartner reviewers criticize the product as primarily centered on Google Cloud and less comprehensive than generic IAM products.Read 15 Oct 2026 · gartner.com
- Limit: missing collaboration feature
- A Capterra reviewer said Cloud Identity users could not use Google Chat and wanted it included.Read 15 Oct 2026 · capterra.com
- Limit: mobile admin coverage
- Google Play reviewers complain that the Google Admin app exposes far less functionality than the web console and has account-selection or login problems.Read 15 Oct 2026 · play.google.com
- Limit: policy trust and change concerns
- An App Store reviewer criticized Google's policy changes and said dependence on Google created concern about sudden service or licensing changes.Read 15 Oct 2026 · apps.apple.com
- Limit: setup and usability
- G2 reviewers describe account creation as demanding for newcomers and say the interface and concepts can be difficult to learn.Read 15 Oct 2026 · g2.com
- Limit: social login coverage
- A G2 reviewer requested more social-platform login integrations.Read 15 Oct 2026 · g2.com
- Maker legal name
- The Google Admin app identifies its developer as Google LLC.Read 15 Oct 2026 · play.google.com
- Multi-factor authentication
- MFA options include push notifications, Google Authenticator, Titan Security Keys, phones used as security keys, SMS and voice calls.Read 15 Oct 2026 · cloud.google.com
- Notable outage
- On August 20, 2026, IAM was among services affected by a us-west1 disruption lasting 2 hours 22 minutes.Read 15 Oct 2026 · status.cloud.google.com
- Praise: access clarity
- Gartner reviewers say permissions are clear and easier to use than a main competitor's IAM service.Read 15 Oct 2026 · gartner.com
- Praise: low setup effort
- Capterra reviewers say Cloud Identity integrates with applications with little setup and reduces the infrastructure cost of running a separate identity platform.Read 15 Oct 2026 · capterra.com
- Praise: security and integration
- G2 Identity Platform reviewers repeatedly praise MFA, security, centralized management and integration with other Google services.Read 15 Oct 2026 · g2.com
- Public APIs
- Documented APIs include Groups, Devices, User Invitation, Policy and Allowlisted Domains APIs.Read 15 Oct 2026 · docs.cloud.google.com
- Rating on Apple App Store
- 1.7 out of 5 from 518 ratingsRead 15 Oct 2026 · apps.apple.com
- Rating on Capterra
- 4.8 out of 5 from 4 reviewsRead 15 Oct 2026 · capterra.com
- Rating on G2
- 4.3 out of 5 from 34 reviewsRead 15 Oct 2026 · g2.com
- Rating on G2 Identity Platform
- 4.5 out of 5 from 17 reviewsRead 15 Oct 2026 · g2.com
- Rating on Gartner Peer Insights
- 3.8 out of 5 from 4 ratingsRead 15 Oct 2026 · gartner.com
- Rating on Google Play
- 3.6 out of 5 from 29.1K reviewsRead 15 Oct 2026 · play.google.com
- Release update
- On July 3, 2026, all system-defined rules became available through the Policy API.Read 15 Oct 2026 · docs.cloud.google.com
- SDKs
- The Groups API setup documentation provides Python client installation using google-api-python-client, google-auth, google-auth-oauthlib and google-auth-httplib2.Read 15 Oct 2026 · docs.cloud.google.com
- Secure LDAP
- Secure LDAP lets users access traditional LDAP applications and infrastructure with Cloud Identity credentials.Read 15 Oct 2026 · cloud.google.com
- Security certification
- Cloud Identity is listed within the scope of Google's ISO/IEC 27001 certification for Google Workspace services.Read 15 Oct 2026 · cloud.google.com
- Security controls
- Cloud Identity features include context-aware access, account takeover protection, and threat investigation with Security Center.Read 30 Sep 2026 · cloud.google.com
- Service level
- The editions page lists a 99.9% SLA for Premium.Read 30 Sep 2026 · docs.cloud.google.com
- Single sign-on
- The product provides SSO to thousands of cloud and on-premises applications.Read 15 Oct 2026 · cloud.google.com
Plans and prices
Strong points and limits
Strong points
- Federates with Active Directory and Microsoft Entra ID
- SSO to thousands of SaaS apps
- Manages Android, iOS, and Windows devices
- Free includes 50 licenses by default
- Supports SAML and OpenID Connect
Limits
- Premium annual plan costs $6 a month
- Flexible Premium costs $7.20 a month
- Additional Free licenses require a request
Who it suits
Cloud Identity suits organizations that need centralized user and group management, app SSO, device controls, and automated provisioning. The Free edition may suit deployments that fit within its default 50 licenses, while Premium adds listed enterprise features and support.
Verdict
Cloud Identity combines identity federation, SSO, MFA, provisioning, and endpoint management in one service. Compare the Free license allowance with the Premium pricing and support terms for your needs.
Where Specifiction places it
- Identity and Access Management Software#2 of 459.2
- Single Sign-On Software#2 of 349.2
- Passkey Authentication Software#5 of 559.2
- Authentication Software#3 of 319.1
- OAuth Server Software#4 of 329.0
- Customer Identity and Access Management Software#4 of 299.2