If you are currently configuring your organization's deployment profiles,I can provide the exact steps needed to map your Google IDs and enforce EFRP correctly. Share public link