Lutril reads and manages your workforce directory through the AWS Identity Store API. You provide an IAM access key (Access Key ID and Secret Access Key), the Identity Store ID, and the Region where IAM Identity Center is enabled. SCIM is supported as an alternative.
IAM policy allowing identitystore actions (for example identitystore:ListUsers, DescribeUser, CreateUser, UpdateUser, DeleteUser) for the Identity Store
Alternative: an SCIM endpoint base URL and access token from the Identity Center provisioning settings
Setup steps
In the AWS console, open IAM Identity Center and confirm it is enabled in your chosen Region. Open IAM Identity Center
On the IAM Identity Center Settings page, copy the Identity Store ID (it starts with d-) and note the Region. Enter both in Lutril.
In IAM, create (or reuse) an IAM user with a policy that allows the identitystore actions on your Identity Store.
For that IAM user, open Security credentials and create an access key, then paste the Access Key ID and Secret Access Key into Lutril. Open IAM users
Alternative (SCIM): in IAM Identity Center, enable automatic provisioning to get an SCIM endpoint and access token, and enter the SCIM base URL and token in Lutril instead.
