Skip to main content

AWS - IAM Identity Center Integration

Updated

Prepare AWS IAM Identity Center User for integration

Please refer to the official document for more details.

Integrating AWS - IAM Identity Center with Josys enables the IT Admin to view the user accounts.  

Key benefits

When you integrate Josys with AWS IAM Identity Center, you can:

  • View: List of user accounts, including their status
  • Perform action: Delete user account.

Note: Josys supports multiple AWS IAM Identity Center integrations.

Prerequisites 

Before you begin with the integration, make sure that you have:

  • An AWS IAM Identity Center admin account
  • The Region, Identity Store ID, Access key ID, and Secret Access Key

Creating a Policy for Integration

Step 1: Log in to AWS and select IAM from the Services menu.

Step 2: Select Policies under Access Management and click Create Policy.

Step 3: Click the JSON tab, enter the following code in the Policy editor, and click Next.

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Effect": "Allow",
			"Action": [
				"iam:Get*",
				"iam:List*",
				"iam:AddUserToGroup",
				"iam:DeleteUser",
				"iam:CreateUser",
				"iam:DeleteLoginProfile",
				"iam:CreateLoginProfile"
			],
			"Resource": "*"
		}
	]
}

Step 4: Enter a policy name for identification and click Create policy. 

Creating a User for Integration

Step 1: Select Users under Access Management and click Create User.

Step 2: Enter a user's name for identification and click Next. 

Step 3: Select Attach policies directly from the Permissions options and then select the policy created in the previous section. Click Next.

Step 4: Review the user's details, their permissions, and click Create user.

Step 5: Open the user you have created and click the Security credentials tab. Click the Create access key.

Step 6: Select Third party service option from the Use case, click the confirmation checkbox, and then click Next.

Step 7: Click the Create access key.

Step 8: Copy the Access key and Secret access key to use later in the integration steps and click Done.

 

Locating the Region and Identity Store ID

Step 1: Log in to AWS - IAM Identity Center using an admin account and select IAM Identity Center from the Services menu.

Step 2: Click Settings and copy the Region and Identity Store ID details to use later in the integration steps.

 

Steps to Integrate

Step 1: Select AWS - IAM Identity Center from the App Catalog in the Apps section.

Step 2: Provide a suitable Label for identification. Enter the Access key ID and Secret Access key copied in the previous section, and then click Next to proceed.
 

Step 3: After the integration is complete, allow some time for data synchronization. You can now view and perform required actions from the Managed Apps in the Apps section.

Related articles