AWS SSO change identity source

Question

When I try to switch the identity source in IAM identity center(AWS SSO), I'm getting "IAM identity center will delete your current MFA configuration". Does this mean IAM users will also be affected?

I'm expecting the users in IAM not be affected. I expect only resources in IAM identity center to be affected.

Accepted Answer

Could you please explain little more, what are you changing. I mean what is your existing Identity source and what's going to be.

I hope you are already aware of this fact *If you’re using an external IdP, you will not see the Multi-factor authentication section. The external IdP manages MFA settings rather than IAM Identity Center managing them.*

Here are some of the references:

- [Considerations for changing your identity source](https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-identity-source-considerations.html)

- [Considerations before using MFA in IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/mfa-considerations.html)

- [Enable MFA](https://docs.aws.amazon.com/singlesignon/latest/userguide/mfa-enable-how-to.html)

Hope this helps. Also, please comment here or update your question about change in identity store source.

Abhishek

AWS SSO change identity source

Relevant content