By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

AWS Identity Center showing retired AD group

0

I recently renamed one of the AD groups which was mapped to my AWS identity center from **access_group_thractor ** to access_group_tractor.

I then went into AWS Identity Center and deleted the old group and added the new group

When I go back into the application the old group name **access_group_thractor ** keeps showing up inside AWS Identity center after deleting and adding the correct group name.

  • Chris
    a year ago

    Two questions: 1) Why don't you manage the groups directly in the AD? 2) Did you set up AD sync?

  • DJFA_Cloud
    a year ago

    @chris The groups are created and managed in AD, also AD Sync is setup

Topics
Security, Identity, & ComplianceAWS Well-Architected Framework
Tags
AWS Identity and Access ManagementSecurity
Language
English
DJFA_Cloud
asked a year ago210 views
1 Answer
0

Hi,

You should look at the ADsync attribute mapping. A Group might have different attribute (Common name, display name, etc.) and the one you changed might not be the used for the mapping and the creation in Identity Center.

Jeff

AWS
Jeff Lombardo-AWS
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content