Cloud Identity For Customers Partners | Google Identity

Introduction

Cloud Identity is a cloud-based identity management service by Google that helps organizations manage users, devices, and apps from a central location. It provides secure access and enables you to manage identities for customers and partners effectively. This tutorial will guide you through the fundamentals of setting up and using Cloud Identity for customers and partners.

Setting Up Cloud Identity

To get started with Cloud Identity, you need to set up an account and configure the necessary settings. Follow these steps:

Go to the Google Admin Console and sign in with your administrator account.
Navigate to the Account section and select Cloud Identity.
Follow the on-screen instructions to set up your Cloud Identity account.
Once set up, you can start adding users and configuring settings.

Adding Users

Adding users to your Cloud Identity account is straightforward. Here's how:

In the Google Admin Console, go to the Users section.
Click the Add User button.
Fill in the user's information, such as name, email address, and password.
Click Save to add the user.

Example:

Let's add a user named John Doe with the email john.doe@example.com:


                        Name: John Doe

                        Email: john.doe@example.com

                        Password: ********

Managing Devices

Cloud Identity allows you to manage and secure devices that access your organization's resources. To manage devices:

Go to the Devices section in the Google Admin Console.
You can see a list of all devices that are registered with your Cloud Identity account.
Select a device to view details, enforce policies, or take actions like wiping the device if it's lost or stolen.

Example:

Here's how you can enforce a policy to require a screen lock on all mobile devices:


                        Admin Console > Devices > Device Settings > Require Screen Lock

Configuring Access Policies

Access policies help ensure that only authorized users and devices can access your resources. To configure access policies:

Go to the Security section in the Google Admin Console.
Select Access and Data Control and then Access Management.
Configure policies such as 2-step verification, app access control, and context-aware access.

Example:

To enable 2-step verification for all users:


                        Admin Console > Security > 2-step verification > Enable for all users

Partner Integration

Integrating partners into your Cloud Identity setup involves adding them as users and granting appropriate access rights. Here’s how:

Go to the Users section in the Google Admin Console.
Click Add User and enter the partner’s information.
Assign the user to a group that has predefined permissions suitable for partners.
Configure access policies to ensure that partners can only access the resources they need.

Example:

Add a partner named Jane Smith with the email jane.smith@partner.com and assign her to the "Partners" group:


                        Name: Jane Smith

                        Email: jane.smith@partner.com

                        Group: Partners

Monitoring and Reporting

Monitoring and reporting are crucial for maintaining security and compliance. Cloud Identity provides various tools for this:

Go to the Reports section in the Google Admin Console.
Select the type of report you want to generate, such as user activity, device activity, or security reports.
Customize the report by selecting the desired filters and date range.
Generate and review the report to identify any unusual activities or compliance issues.

Example:

Generate a user activity report for the last 30 days:


                        Admin Console > Reports > User Activity > Last 30 days > Generate Report

Conclusion

Cloud Identity for Customers and Partners provides a robust framework for managing identities, devices, and access policies. By following this tutorial, you should now be able to set up Cloud Identity, add users, manage devices, configure access policies, integrate partners, and monitor activities effectively. This ensures a secure and efficient management of identities within your organization.