We have a subset of users who are unable to log into GCP. They have tried multiple browsers, incognito mode, etc. to no avail. They were created the exact same way as other users who work fine. It happens whether they start the auth in Okta or start it by browsing to the GCP console directly.
It has been difficult to troubleshoot as we can't recreate it. This is a relatively new GCP organization - we tried going down the Cloud Identity Free route to set up SSO but every avenue pushed us to Workspaces (
admin.google.com) so that is also in the auth path. We're not a G Suite shop and we don't use any other Google services besides GCP.
Does anyone have suggestions for getting to a root cause and fixing?
Thanks!