What all things we are missing in the configuration of SSO inside Azure AD for AWS IAM Identity Center?

Vinod Survase 4,726 Reputation points

What all things we are missing in the configuration of SSO inside Azure AD for WS IAM Identity Center?

We have referred below docs for this SSO implementation with Azure AD but still we are not able to create groups automatically and there is an settings under mapping which we don't see while granting the admin permissions on this app.

Docs: https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/aws-single-sign-on-provisioning-tutorial#step-2-configure-aws-iam-identity-center-to-support-provisioning-with-azure-ad

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
4,279 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,455 questions
{count} votes

Accepted answer
  1. James Hamil 22,981 Reputation points Microsoft Employee

    Hi @Vinod Survase , I'm sorry you're having trouble with this! Please try the following and let me know if it helps:

    1. Make sure that you have granted the required admin permissions to the app in Azure AD.
    2. Check if you have configured the mappings correctly between Azure AD and AWS IAM Identity Center.
    3. Make sure that you have enabled the provisioning service for AWS IAM Identity Center in the Azure portal.

    Please let me know if you have any questions and I can help you further.

    If this answer helps you please mark "Accept Answer" so other users can reference it.

    Thank you,


0 additional answers

Sort by: Most helpful