'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Fix Google Workspace Group Synchronization with Azure AD and Intune
Question details
Users need to successfully synchronize Google Groups with Azure AD and Microsoft Intune during a Google Workspace federation setup.
- Product
- Azure Active Directory, Microsoft Intune
- Device & OS
- not provided
- Scenario
- Administrators are configuring identity synchronization between Google Workspace and Azure Active Directory.
- Observed behavior
- Google Workspace user accounts successfully synchronize with Azure AD, but Google Groups do not automatically appear in Azure AD during federation.
Ensure you have global administrator privileges in both your Google Workspace Admin Console and the Microsoft Entra ID (Azure AD) portal before reviewing synchronization settings.
Consult Microsoft Q&A Specialists for Enterprise Synchronization
Because cross-platform group synchronization between Google Workspace and Azure AD requires specialized enterprise configurations, contacting Microsoft support specialists is the recommended approach.
Group synchronization behavior differs from user identity synchronization due to varying API endpoints and attribute mappings between Google Workspace and Microsoft Entra ID. Resolving this often requires custom provisioning rules or third-party enterprise tools.
Microsoft provides dedicated support engineers and community specialists to guide administrators through complex Intune and Azure AD federation scenarios.
Open your web browser and navigate to the official Microsoft Q&A community portal at https://learn.microsoft.com/en-us/answers/questions/.
Click on Ask a question and provide detailed information about your current federation setup, explicitly stating that user identities are syncing but Google Groups are not appearing in Azure AD.
Add the Microsoft Intune and Azure Active Directory tags to your submission. This ensures your question is immediately routed to the specialized enterprise identity support team.
Document Your IT Infrastructure with WPS Office
While resolving complex Azure AD and Google Workspace federation issues, you need a reliable tool to maintain your IT documentation. WPS Office is a lightweight, free alternative to Microsoft Office that allows you to easily create, edit, and share comprehensive network guides, deployment plans, and spreadsheets.
Frequently Asked Questions
Why do Google Workspace users sync to Azure AD but groups do not?
User identities and group objects utilize different attributes and SCIM (System for Cross-domain Identity Management) endpoints. While basic SAML federation handles user authentication perfectly, group memberships often require explicit mapping configurations in your Azure AD provisioning settings.
Where can I find the synchronization errors for Azure AD?
You can locate synchronization logs by logging into the Azure portal, navigating to Azure Active Directory (or Microsoft Entra ID), selecting Enterprise Applications, choosing your Google Workspace application, and clicking on Provisioning logs.
Can Microsoft Intune manage devices without synchronized Google groups?
Intune requires properly synchronized user and device groups to apply policies efficiently. If groups fail to sync from Google Workspace, administrators may need to manually create dynamic or assigned groups directly within Azure AD to manage Intune profiles.
