On 3/8/19 4:58 AM, Janet Houser wrote: I don't think FreeIPA generates password hashes outside of the directory.  I'd expect it to store whatever hash you configure 389 DS to store, if you change that setting directly in the directory service. On the other hand, I wouldn't recommend syncing password hashes at all.  Google Cloud supports third-party SSO using SAML 2.0. You should be able to use GCDS to sync your user accounts, and use SAML for authentication.