Google / AD SSO options?

[Shaun_Dark_Lord]

Morning!

 

I'm looking for options for two-way password sync for specific users between Google and on-site AD. We'd like to maintain some separation between the two services, so don't currently believe that ADFS would be beneficial at this time.

 

The AD to Google password sync can be easily handled by Google's password sync process.

 

The Google to AD sync is what I'm currently pondering. We can set a custom URL for the Google password change. I have considered building something bespoke that handles that request, and then updates both Google and AD passwords, but that obviously needs to be robust and secure, which is likely to take time.

 

Are there any viable open source or commercial solutions for this? I don't want to spend a fortune on this, as it only affects a specific subset of users.

 

Regards