Hi,
Sorry to dredge up an old post.
I am also looking at this at the moment. The SSO works well from Azure AD to G Suite.
How did you deal with the lack of OU sync from Azure AD? I can see now that you can now apply services to groups of users in G Suite, but it still looks like you need OUs to apple policies for user device settings.
Cheers,
Martin