Setup AWS as a SCIM Server using the User Provisioning module in Drupal
Overview
Syncing user information across the applications that use Drupal as central Identity Provider is necessary. miniOrange User Provisioning and Sync module ensures that any changes in the user fields/roles are reflected to the connected AWS application in accordance with the SCIM protocol. This setup guide will walk you through the steps to configure manual, automatic, or scheduler-based provisioning with AWS. It is compatible with Drupal 9, Drupal 10 and Drupal 11.
Installation Steps
- Using Composer
- Using Drush
- Manual Installation
Configuration Steps
Configure Drupal as SCIM Client
- Once the module is installed, navigate to the Configuration tab of the Drupal site and select miniOrange User Provisioning.
- Navigate to the User Provisioning tab of the module and click on the Configure button under the Changes from Drupal to Provider (SCIM Client) section.
- Enable the Enable SCIM Client API Integration checkbox.
Configure AWS as SCIM Server:
- Log into the AWS Admin console.
- Search for IAM in the search bar and click on the IAM Identity Center (successor to AWS Single Sign-On).
- Navigate to the Setting tab from the left navigation panel.
- Under the Actions dropdown, click on Manage Provisioning.
- Copy the SCIM Base URL
- Navigate to the Drupal site and paste the copied SCIM Base URL under the SCIM Base URL text field.
- Navigate to the AWS console and click on the Generate Token button.
- Copy the generated Access token.
- Navigate to the Drupal site and paste the copied Access token under the SCIM Bearer Token text field.
- Click on the Save and Test Credentials button.
- Once the test is successful, the following success message will be shown on the screen.
Attribute Mapping:
- Once done with the configuration, scroll down to the Attribute Mapping section.
- From the Drupal User Attribute dropdown, select the user attribute to map with the SCIM Provider Attribute.
- Click on the Next Step button.
How Provisioning Works?
The module supports 3 types of provisioning:
- Manual/On-Demand Provisioning
- Automatic Provisioning
- Scheduler-based Provisioning.
- Choose your preferred provisioning option.
- Manual/On-Demand Provisioning
- Automatic Provisioning
You can see the user has been successfully provisioned to the Drupal Server site.
Congratulations, you have successfully set up AWS as the SCIM Server and Drupal as the SCIM Client.
If the Provision was not successful, please contact us at drupalsupport@xecurify.com. Please send the screenshot of the error window, and we will assist you in resolving the issue and guiding you through the setup.
Why choose us:
[MO_CONTACT_US]