AWS IAM Identity Center - SCIM Configuration - RSA Ready Implementation Guide
Last Modified: 2026-10-30

This article describes the configuration steps for integrating AWS IAM Identity Center with RSA Cloud Access Service (CAS) using SCIM. CAS will serve as the SCIM client, with AWS IAM Identity Center acting as a SCIM server providing an endpoint for the SCIM client to connect.

  

Configure CAS

Perform these steps to configure CAS as a SCIM client. 
Procedure

  1. Sign in to the RSA Cloud Administration Console.
  2. Follow the steps in the Configure CAS section of the AWS IAM Identity Center - SAML My Page SSO Configuration - RSA Ready Implementation Guide. After completing the SAML configuration, proceed to the next step to configure fulfillment details, if enabled.
  3. Navigate to the Fulfillment page on the left pane.
  4. Enable the fulfillment service using the toggle, and choose the Approver Type from: None, Manager, Application Owner, and Manager & Application Owner.
  5. In the Fulfillment Configuration Type drop-down list, choose SCIM Endpoint and enter the required details.
    1. Base URI: https:// <your-AWS-instance>/services/scim/v2. Copy this from the AWS Automatic Provisioning section.
    2. Access Token: Copy from the AWS Automatic Provisioning section. 
  6. Click Save and Finish.
  7. Click Publish Changes.

     

Configure AWS IAM Identity Center as a SCIM Server

Perform these steps to configure AWS IAM Identity Center as a SCIM server. 
Procedure

  1. Log in to the AWS IAM Identity Center Management Console with admin credentials or as a root user.
  2. To integrate AWS IAM using SAML, follow the steps in the Configure AWS IAM Identity Center section of the AWS IAM Identity Center - SAML My Page SSO Configuration - RSA Ready Implementation Guide.
  3. To enable SCIM in AWS IAM Identity Center, navigate to IAM Identity Center > Settings and click  Enable against Automatic provisioning.
  4. Navigate to Settings > Identity source and click Actions > Manage provisioning.
  5. Under Automatic provisioning, copy the SCIM endpoint – IPv4 only URL and Access token ID values. You will use these values to configure CAS.

The configuration is complete.

Don't see what you're looking for?