In the context of an organization assessing Google Cloud Platform (GCP) for specific IT workloads, where a well-established directory service manages user identities and lifecycle management, and this directory service must remain the primary 'source of truth' for identities, which solution best meets the organization's requirements?