AWS IAM Identity Center application

AWS IAM Identity Center is an identity management and single sign-on (SSO) service for AWS. MIA connects to it to inventory the users of your organization and manage their access.

Authentication type and prerequisites

Authentication type — SCIM Bearer token

Prerequisites

Be an AWS IAM Identity Center administrator and have the full SCIM endpoint and access token generated by IAM Identity Center.

Connection steps

1. Open the IAM Identity Center console in AWS.
2. In the left-hand menu, open Settings.
3. In the Automatic provisioning information box, click Enable.
4. In the Inbound automatic provisioning dialog, copy the full SCIM endpoint and the Access token. To display the token, click Show token.
5. Store both values immediately: AWS states that this is the only time you can retrieve the SCIM endpoint and access token together.
6. In MIA, open Applications → Add an application, search for AWS IAM Identity Center, enter the SCIM endpoint in the domain/endpoint field and the access token, then click Connect.

::: Official source AWS documents this flow in Enable automatic provisioning: https://docs.aws.amazon.com/singlesignon/latest/userguide/how-to-with-scim.html. :::