Azure AD Config for AWS SSO

By Kabir VaderaaPublished 22nd August 2020Updated 20th January 20227 min readAzure ADAWS SSOSAMLSCIMIdentity

Azure Config

Log in to your Azure portal, go to Active Directory → Enterprise Applications → New Application. Select Non-Gallery Application.

Click Single Sign-on → SAML: then Upload Metadata File (the file from Part 1). Download the Azure Metadata XML and upload it back in AWS.

In AWS SSO, click Enable Automatic Provisioning. Copy the SCIM URL and Token generated.

In Azure AD, go to Provisioning → Automatic. Enter the SCIM URL and Token, then click Test Connection.

Attribute mapping changes required:

All users must have First name: Last name: and Display name filled in.
Delete mappings for facsimileTelephoneNumber and mobile.
Change mailNickname source attribute from mailNickname to objectId.

Turn on Provisioning Status and save. Azure AD syncs every 40 minutes.

Talk directly with an enterprise architect on your programme requirements.