Azure AD > G Suite

Hi all,

 

I've configured G Suite within Azure and with a handful of test users, everything appears to be working fine, but on subsequent synchronisation attempts I'm getting 'invalid credentials'. This article describes the issue exactly, but it's dated 2016. Is anyone else seeing this?

 

The second query I have, despite specifying 'Sync all users and groups' on the Provisioning tab (in Azure), users are not created in G Suite. Users are only created when they're manually added to 'Users and groups' tab.

 

I then came across this article detailing how to bulk assign users, but Powershell tells me they're already assigned!?

 

I must be overlooking something and any help would be appreciated!

Thought I'd update my own discussion, but Azure Support have confirmed there is a problem (just my luck). Fortunately there is a workaround -

 

Add two separate G Suite App instances in Azure and configure the one for SSO and the second for User Provisioning. This works and users are now being generated from Azure > G Suite, all be it in the default OU.

Interestingly Microsoft's reasoning is: "This is a known issue caused by API call limits on Google's end" - yet there's no mention of it in the Microsoft setup notes!