AWS Identity Center Integration Setup

Getting Started

The following fields are required from AWS Identity Center:

Requirements

• Access Key

• Secret Access Key

• AWS Region

Getting the Access Key and Secret Access Key

1. Login to your AWS Console.

2. Select "Security Credentials" on the dropdown when you hover over your user email on the top-right.

3. Scroll down, until you see a section called "Access Keys". You will see a section shown in the below image:

   
4. Click on "Create Access Key", select "Other" when prompted to enter use-case and click "next".

   
5. Please provide a description for this (For Example: BalkanID access) and press "Create Access Key". You will then be taken to a page looking like the below image:

   
6. Make a note of the Access Key and Secret Access Key. Your Region will be the AWS Region in which your AWS Identity Center is configured. To find out which region, please click on the region name beside your email on the top right corner of the screen, and copy the code. For example, the region in the screenshot below is "us-east-1".

   

Authentication

Access Key is used for authentication. The authenticated IAM User needs to have access to the Identity Center for the integration to work correctly. The IAM User needs to have the following policies attached to it:

Configuring AWS Identity Center on BalkanID Tenant

1. Login to the BalkanID application and switch to the tenant you would like to add your integration to.

2. Head to Integrations > Add Integration, select AWS Identity Center.

   

   
3. Set up the Primary Application owner (mandatory) and the Description, if any. Set up Secondary Application Owner(s), if any.

   Select the Extraction Type. From here, you can configure your application using one of the following methods:

   1. Direct integration - Provide your Access Key, Secret Access Key and Region obtained above to set up a direct connection with BalkanID.

   2. SCIM integration - Provide SCIM server credentials to set up a SCIM connection with BalkanID.

   3. Manual file upload - Upload Entity and Entity Relations through a .CSV file upload. Contact the team for assistance with this.

   4. Automated upload using API - You can upload data using our Bulk APIs with the help of an API key which will be provided to you. Please refer to the entity and entity relation upload docs for specific instructions on uploading your data through the API.

   
4. Click on next to move onto Optional Configuration.

5. Fill Optional configuration, if required.

   
6. Once you filled in the information, click Save. Your integration is now configured and you will see the status of the integration displayed alongside other integrations on the Integrations page. When data is available, the integration Status will read Connected and the integration Message will read Data available.