1

I'm currently working on a project that involves integrating Active Directory (AD) with Amazon Connect to streamline user login and authentication. I’m aware that Amazon Connect offers the option to link to an existing Active Directory via the "Link to existing directories" feature, but I’m looking for more details on how user management works in this setup.

Specifically, I’d like to know:

  • Is the creation of users in Amazon Connect automated once a new user is added to Active Directory? For instance, if a user is created or updated in AD, are they automatically provisioned in Amazon Connect with the appropriate permissions and profiles?
  • Or is manual intervention required to create or update users in Amazon Connect after they’ve been added in AD?

I'm trying to reduce manual overhead and would like to implement this in a way that ensures user provisioning is as seamless as possible. If anyone has experience with this integration or knows of any official documentation that covers this process, I would appreciate your guidance.

Thanks in advance for your help!

Improve this question
2

2 Answers 2

Reset to default
0

AD integration is for authentication only. User provisioning is still done in Amazon Connect Console. There are API's to create users if you want to automate provisioning, but that doesn't come "out of the box".

Workflow for a new user:

  1. Create a new user in Active Directory
  2. Create a new user in Amazon Connect with the same UPN (case sensitive)
  3. User can login without creating a password in Amazon Connect
Improve this answer
Sign up to request clarification or add additional context in comments.

1 Comment

Thanks for your answer, I have found out with AWS Support that is possible integrate AD and Amazon Connect with SCIM protocol to automate user management. Basically, you can deploy an api gw endpoint (scim endpoint on aws) and share this info with AD. So, when you create a new user (or update or delete) on AD with SCIM endpoint you can call API gateway that will invoke AWS Lambda to create or delete or update user on Connect, automatically. I hope it s clear
0

There is a design pattern published for this. I haven't implemented it myself yet so I can't speak on the nuance but as advertised it does scim provisioning of users via Okta. Same concept could conceptually be applied to other tech stacks.

https://github.com/aws-samples/amazon-connect-user-provision-with-okta

Improve this answer

Comments

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.