How to setup AWS IAM Identity Center with AWS Managed Microsoft AD
Tags: aws, authentication, authorization, devops
Published: 2023-01-21 21:50:51

This is a second article in series on Outsource your Authentication and Authorization to AWS IAM Identity Center.

In this article we will be configuring the AWS Managed Microsoft AD as an identity source for AWS IAM Identity Center(successor to AWS Single Sign-On).

### Prerequisites
- AWS Managed Microsoft AD, [you can follow the previous article in series](https://dev.to/abdrehman98/how-to-setup-aws-managed-microsoft-active-directory-l84) 
- AWS Organization should be already setup, it can be done in few clicks if any of you want a article on that feel free to leave a comment
- Basic understanding of what are Single Sign-On Systems

I will be using N. Virginia(us-east-1) region throughout the series. To setup AWS IAM Identity Center with AWS Managed Microsoft AD follow the following steps:

1. On your AWS Console search for Identity and click on IAM Identity Center
![IAM Identity Center](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/sugzbigv1g4svv95dogr.png)
2. Then enable and wait for few seconds
![Enable IAM Identity Center](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/iooqy43lovzlcivc1999.png)
3. Now lets configure previously created Managed AD as our identity provider(IdP). For that click on Choose your identity source
![Configure IdP](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/i4m3urih2b6a1zgrc5lj.png)
4. Then under Identity Source select Action and click on Change identity source
![Change identity source](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/yv0o11r3fixhn6yp0jd0.png)
5. Then select Active Directory and Click Next
![Select Active Directory](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/k7bjlc2jkbw8of1psvms.png)
6. Then under Existing Directories select the AD we created previously and click Next
![Select the AD](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/fgonphz5fqzo4hrugi63.png)
7. Now review all the consequences and type ACCEPT in confirmation box and click Change identity source
![Review idp](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/xbix3ij2ezamp57rb7pw.png)
8. Then wait for few seconds for changes to get applied and then you will be returned to Setting screen. Now click on Resume Sync
![Resume Sync](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/9vb0fsgutihu7kk0dvm3.png)
9. Now we need Configure attribute mappings from AD to IAM Identity Center. AWS have recommended one we will go with them to configure at top of setting page click on Start guided setup
![Configure attribute mappings](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/eualswalmkf8zgbvg2fy.png)
10. For now we don't need to modify the attribute mapping just click Next to configure it
![Configure attribute mappings](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/yx7rdvz59fiw88ihtt9y.png)
11. Currently our AD have one user(Admin) and zero groups we will import Admin User searching Admin in search box then click Add and then select user and click next
![Import Admin User](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/bh7bym6b13iroavcnbfv.png)
12. Then click on Save configuration
![Save configuration](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/z06y1uarbmqrk1fa7gy4.png)

That is it we have done all the required things to setup AWS IAM Identity Center with AWS Managed Microsoft AD.

### Optional Step
Customize our access Portal URL.
13. On your dashboard page. Click Customize in Setting Summary
![Customize URL](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/08ayz1pgyvi7h4gb9n8y.png)
14. Then access portal to your liking and click Save
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/n1jpwl376l1tyr2591zj.png)

### Lets Test our AWS Access Portal
15. Copy the access Portal URL from Setting Summary
![Access Portal URL](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/r64f753bd3amda9yora1.png)

16. Access Portal using the URL you just copied. And login using Active Directory Admin Username and Password. If everything has been configured correctly you should see a Portal without any apps because we haven't configured any yet

![Empty Access Portal](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/flrcvr46tefv1kfxid7b.png)