Skip to main content

AWS connector configuration

When you enable data provisioning, choose the AWS (Template) connector. Enter a unique name for the new connector.

If you selected and configured a template connector, the configured template is stored in Omada Identity. When Omada rolls out changes to the template connectors, your configurations remain intact in your own version.

Connector settings

ParameterDescription
Base addressSpecify the Base URL of the service. The standard value for this field is 'https://iam.amazonaws.com/'.
Entity rootA fragment of the URL that points to provisioned entities (for example: v1/IdentityData).
Content-type headerChoose the format of the content.The default value is application/json.
Accept headerThe default value is application/json.
Service nameEnter the name of the AWS API service that the authentication request will be sent to.
Secret keyEnter the IAM user secret key to authenticate your.
Access keyEnter the IAM user accesskey to authenticate your.
RegionOptionally, enter the AWS region for the authentication request. For the IAM service, leave the field empty.

Task mappings

Configure the task mappings by mapping assignment to resources:

  1. From the system onboarding view, in the Provisioning section, click the Task mappings option.
  2. In the Assignments column, click none and enter the following assignments:
    • AWS Account (assignment: AWS - User)
    • AWS Group (assignment: AWS - Group Assignment)
    • AWS Managed Policy (assignment: AWS - Attached Policy Assignment)
  3. (optional) If a password reset is enabled, select the appropriate task mapping for AWS Account for password reset events.
  4. Click OK to confirm the changes.