AWS IAM Identity Center Simplifies Identity Source Changes from Active Directory
IAM Identity Center now retains workforce identities and assignments when changing the identity source from Active Directory to an external IdP or the Identity Center directory, eliminating the need to recreate them.
AWS IAM Identity Center now retains employee identities and assignments when changing the identity source from Active Directory to an external identity provider or Identity Center directory. This includes users, groups, group memberships, permission set assignments, and application assignments, eliminating the need to recreate them in IAM Identity Center and keeping existing identity store IDs consistent. As a result, users retain access to AWS accounts and applications, and policies referencing user, group, or identity store IDs continue to function. To make the change, configure the new identity source with standard sign-in settings. After the change, employees sign in through the dual-stack AWS access portal URL. Reverting to Active Directory remains possible using the traditional method. This capability is available for organization instances of IAM Identity Center in all AWS regions where IAM Identity Center is offered, at no additional cost.
Why it matters
IAM Identity Center connects workforce identities to AWS and centrally manages access across AWS applications and accounts. This update reduces effort when changing identity sources and makes access management more flexible.
Regions: Same as AWS IAM Identity Center