Skip to main content

AWS IAM Identity Center

Updated

Overview

This guide outlines the steps to integrate AWS IAM Identity Center on the App Catalog page in Josys.

Integration Specifications

Target Plans -
Admin Role Required for Integration -
Integration Method API Key/Token 
Integration Key Email
Supported Features Account Deletion Account Visualization 
Statuses Excluded from Unmanaged IDs Deleted 
Available Settings on Provisioning  
Available Settings on Deletion  
Subscription Information How to check subscription information 
Visualized Items -
Retrieved Items for License Management  
Common Items  
Permission Editing  
Target Accounts for Integration N/A

Preparing the AWS IAM Identity Center User for Integration

For details, please refer to the official documentation.

Creating an Integration Policy

  1. Log in to AWS with a user who has user creation permissions. Select Services in the top left of the screen, then select IAM to open the IAM console.
  2. Open Access management > Users, and click Policies. Click Create policy.

  3. Click the JSON tab and copy and paste the following content. Click Next: Tags. 
    {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "identitystore:List*",
                "identitystore:DeleteUser"
            ],
            "Resource": "*"
        }
    ]
}
  4. Without setting tags, enter a name of your choice and click Create policy.
    In this example, we will name it josys-integration-policy.

Creating an Integration User

  1. Open Access management > Users, and click Create user.

  2. Enter a User name and click Next.

  3. Select and attach the policy you created to the integration user, then click Next.

  4. On the review screen, click Create user.

  5. Retrieve the Access key ID and Secret access key for the created user.
    Under "Access key best practices and alternatives,"
    please select Third-party service.

Integrating with Josys

  1. From the left sidebar of Josys, click "Integrations > App Catalog".
  2. Search for AWS IAM Identity Center and click it.
  3. The integration settings page will appear on the right side.
  4. In AWS, open IAM Identity Center > Settings, and check the Region and Identity store ID.

  5. On the settings screen, enter the Region, Identity store ID, Access key ID, and Secret access key. After entering the subscription information, click "Next" to complete the integration.

Related articles