AWS IAM Identity Center manages user access to Amazon Web Services (AWS) resources, including both AWS accounts and applications.
Organizations might change the configuration of their identity source in IAM Identity Center for various reasons. These include switching identity providers (IdPs), expanding their identity footprint, adopting new features, and so on.
Understanding these identity source options can help you choose the source that best fits your user management needs based on your existing infrastructure and authentication requirements.
When you change the identity source, the work required varies depending on the original and new sources.
This deployment covers permission sets and application assignments’ backup and restore.
Assignments can be backed up by running the backup.py file from GitHub.
The target will become the new authoritative identity source. When done, verify that the group memberships and attributes have been correctly transferred.
Update your IAM Identity Center configuration to point to the new source.
Assignments can be restored by running the restore.py file from GitHub.
By following these steps, you can streamline the transition process, providing a smooth and efficient transfer of user access with minimal downtime.