AWS IAM Identity Center simplifies identity source changes from Active Directory

AWS IAM Identity Center Update

AWS IAM Identity Center now retains your workforce identities and their assignments when you change your identity source from Active Directory to an external identity provider (IdP), such as Okta or Microsoft Entra ID, or to the Identity Center directory. This update preserves users, groups, group memberships, permission set assignments, and application assignments, eliminating the need to recreate them in IAM Identity Center.

IAM Identity Center helps you manage workforce identities and access centrally across AWS applications and accounts. When switching from Active Directory, your existing identity store remains in place, ensuring users retain their access and policies continue to work.

What to do

• Configure your new identity source with the standard setup for user sign-in.
• Ensure your workforce signs in through the dual-stack AWS access portal URL.
• Note that changing the identity source back to Active Directory works as before.

This feature is available for organization instances of IAM Identity Center in all AWS Regions where it is available. IAM Identity Center is provided at no additional cost.

To get started, navigate to the IAM Identity Center console. For more information, see Change your identity source in the IAM Identity Center User Guide. To learn more about IAM Identity Center, visit the product detail page.

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.