AWS IAM Identity Center simplifies identity source changes from Active Directory

AWS IAM Identity Center now retains workforce identities and assignments when changing identity sources from Active Directory to external identity providers or the Identity Center directory.

• Preserves users, groups, group memberships, permission set assignments, and application assignments during identity source changes
• Existing identity store remains in place with users and groups keeping the same IDs
• Users retain access to AWS accounts and applications without recreation
• Policies referencing user IDs, group IDs, or identity store ID continue to work
• Available for organization instances of IAM Identity Center across all AWS Regions
• No additional cost for this feature

This eliminates the need to recreate identities when migrating between identity sources, simplifying identity management transitions.