AWS SSO Integration

[jezzanuena]

Hello! Does anyone integrate AWS SSO here? What approach did you use? We've been trying to integrate it into our environment. But, AWS SSO API actions do not include a listing of group members, we're unable to do the account-entitlement mapping. Your response is highly appreciated.

[rushikeshvartak]

Your requirements is regarding reconciliation ? if yes share link which currently you are referring 

Or as per subject line making sso for authentication ?

[jezzanuena]

Referring to AWS IAM Identity Center. And Yes reconciliation. Which link though? 

[rushikeshvartak]

API documentation used for

• authentication 
• account import
• access import 

[jezzanuena]

Here you go, so the authentication is successful as well as the importing of accounts and access. The only thing that is not working is the mapping, when you go to the Account and see if it has entitlement, I see nothing. Same when you go to the entitlement, there are no accounts in it.

"acctEntParams": { 

           "connection": "userAuth", 

           "entTypes": { 

              "Groups": { 

                 "call": { 

                    "call1": { 

                       "callOrder": 0, 

                       "stageNumber": 0, 

                       "processingType": "httpAcctToEnt", 

                       "http": { 

                          "httpHeaders": { 

                             "Authorization": "${access_token}" 

                                                       }, 

                          "url": "https://....../f3vf91c4a1d-c2d1-4f16-b984-fa652642e776/scim/v2/Groups/?members=$id", 

                          "httpContentType": "application/json", 

                          "httpMethod": "GET" 

                                    }, 

                    "listField": "Resources", 

                    "entKeyField": "entitlementID", 

                     "entIdPath":"id", 

                    "acctKeyField": "accountID" 

                                  } 

                         } 

                     } 

               } 

           } 

     } 

[rushikeshvartak]

Please share postman output for Account to Access Mapping