# AWS IAM Identity Center + Lutril: setup guide

> Lutril reads and manages your workforce directory through the AWS Identity Store API. You provide an IAM access key (Access Key ID and Secret Access Key), the Identity Store ID, and the Region where IAM Identity Center is enabled. SCIM is supported as an alternative.

Source: https://www.lutril.com/integrations/aws
Category: Identity (IDP)
Auth: service_account
Last verified: 2026-06-17

---

## Setup

1. [object Object]
2. On the IAM Identity Center Settings page, copy the Identity Store ID (it starts with d-) and note the Region. Enter both in Lutril.
3. In IAM, create (or reuse) an IAM user with a policy that allows the identitystore actions on your Identity Store.
4. [object Object]
5. Alternative (SCIM): in IAM Identity Center, enable automatic provisioning to get an SCIM endpoint and access token, and enter the SCIM base URL and token in Lutril instead.

## Access requested

- IAM policy allowing identitystore actions (for example identitystore:ListUsers, DescribeUser, CreateUser, UpdateUser, DeleteUser) for the Identity Store
- Alternative: an SCIM endpoint base URL and access token from the Identity Center provisioning settings

## References

- [AWS IAM Identity Center documentation](https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html)
- [AWS IAM Identity Center console](https://console.aws.amazon.com/singlesignon)
- [Identity Store API reference](https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html)
- [Manage access keys for IAM users](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html)
- [Automatic provisioning (SCIM)](https://docs.aws.amazon.com/singlesignon/latest/userguide/provision-automatically.html)