AWS IAM Identity Center enables integrating multiple Microsoft Entra ID tenants through cross-tenant synchronization, allowing users from different Entra ID tenants to access AWS resources using a single identity provider.

<div>
<p>This article explains how to integrate multiple Microsoft Entra ID (formerly Azure AD) tenants with AWS IAM Identity Center using cross-tenant synchronization.</p>
<p>Specifically, the article covers:</p>
<ul>
<li>Creating a target Entra ID tenant to synchronize from source tenants</li>
<li>Configuring the target and source tenants for cross-tenant access and synchronization</li>
<li>Creating dynamic groups in Entra ID to synchronize users and groups to AWS</li>
<li>Configuring AWS IAM Identity Center to use the Entra ID target tenant as an external identity provider</li>
<li>Enabling automatic provisioning of synced users and groups to AWS using SCIM</li>
<li>Verifying access for synced users in the AWS Management Console</li>
<li>Conclusion and resources for further learning</li>
</ul>
</div>


Integrate multiple Microsoft Entra ID tenants with AWS IAM Identity Center

Related articles