I think he/she gets it. It is possible to run your enterprise without using Google software that forces users to pour even more of their data into Google's grasp.
So I think the OP was saying that it would be desirable for those enterprises to allow employees an alternative, for those who do not wish to share even more with Google.
It's not their data, it's the company's data. They don't have access to the services with their personal accounts, only their corporate ones so any data that they pour in is professional work, which belongs to the company. Why would I possibly care that google is mining my company's AD structure or which documents I access in the corporate network? It's the company's problem.
Actually, that example doesn't sound at all insane to me. What if Workday then sells the information that I'm sick a lot to future prospective employers or to health insurers? The employer should have a duty to adequately protect that information. It's not just "their" data.
I don’t know about the US law on confidential employee data, but in some countries selling data like that would be an open and shut lawsuit (against both Google and the employer).
You're confusing different types of data. Data that belongs to the employer, and personal data about the employee which is protected as personal and private as a matter of course, even within the enterprise context.
The company personnel directory is usually considered confidential. Why give it to Google, a company very well equipped to tie those data to personal identities?
> Why give it to Google, a company very well equipped to tie those data to personal identities?
Companies already frequently outsource that list with full personal identities to payroll/benefits providers, among others. Sharing it with someone who might potentially tie it back to personal identity is not, comparatively, a big deal.
You're saying that having Google manage the identities will not provide Google with all the data and perhaps even make them trackable by Google?
What makes you think so?
Cloud identity doesn't appear to be something that you deploy in your network and that is completely isolated from the Google cloud. Quite the contrary.
Whatever google can or cannot do with the data depends on their ToS but that is a problem for the company that contracts them to deal with as it's their data; not the users.
Most importantly, virtually all PaaS and SaaS solutions (office365 being the most well-known) already operate like that; on-prem services are getting pretty scarce nowadays on the enterprise world.
