The other way around worked (Google could use Entra) but it was basically impossible to backend Entra from Google. Weird.