Setup AWS as a SCIM Server using the User Provisioning module in Drupal

Overview

Syncing user information across the applications that use Drupal as central Identity Provider is necessary. miniOrange User Provisioning and Sync module ensures that any changes in the user fields/roles are reflected to the connected AWS application in accordance with the SCIM protocol. This setup guide will walk you through the steps to configure manual, automatic, or scheduler-based provisioning with AWS. It is compatible with Drupal 9, Drupal 10 and Drupal 11.

Playground Schedule a Meeting

Installation Steps

Configuration Steps

Configure Drupal as SCIM Client

• Once the module is installed, navigate to the Configuration tab of the Drupal site and select miniOrange User Provisioning.

• Navigate to the User Provisioning tab of the module and click on the Configure button under the Changes from Drupal to Provider (SCIM Client) section.

• Enable the Enable SCIM Client API Integration checkbox.

Configure AWS as SCIM Server:

• Log into the AWS Admin console.
• Search for IAM in the search bar and click on the IAM Identity Center (successor to AWS Single Sign-On).

• Navigate to the Setting tab from the left navigation panel.

• Under the Actions dropdown, click on Manage Provisioning.

• Copy the SCIM Base URL

• Navigate to the Drupal site and paste the copied SCIM Base URL under the SCIM Base URL text field.

• Navigate to the AWS console and click on the Generate Token button.

• Copy the generated Access token.

• Navigate to the Drupal site and paste the copied Access token under the SCIM Bearer Token text field.

• Click on the Save and Test Credentials button.

• Once the test is successful, the following success message will be shown on the screen.

Attribute Mapping:

• Once done with the configuration, scroll down to the Attribute Mapping section.

• From the Drupal User Attribute dropdown, select the user attribute to map with the SCIM Provider Attribute.

• Click on the Next Step button.

How Provisioning Works?

The module supports 3 types of provisioning:

1. Manual/On-Demand Provisioning
2. Automatic Provisioning
3. Scheduler-based Provisioning.

• Choose your preferred provisioning option.

• Manual/On-Demand Provisioning
• Automatic Provisioning

In Manual/On-Demand Provisioning, the user is manually provisioned from the Drupal site to the AWS application.

Configure Manual/On-Demand Provisioning

• Enable the Manual/On-Demand Provisioning and select the Provisioning operations (i.e. create, update, deactivate, delete) as per your requirements and click on the All Done button.

How Manual/On-Demand Provisioning Works?

• Click on the Perform Manual Sync button under the Manual Provisioning column.

• Search for the user you want to provision to the Drupal Server site and click on the Submit button.

• Once the user is successfully provisioned to the application, a success message is displayed.

• The status of the user in the AWS application can also be checked by navigating to the Users tab in the left navigation panel of the AWS console.

In Automatic Provisioning whenever any CRUD operation(s) is performed on the user in the Drupal site, the same CRUD operation(s) is automatically performed on the user in the AWS Application at the same time (on the fly).

Configure Automatic Provisioning

• Enable the Automatic Provisioning and select the Provisioning operations (i.e. create, update, deactivate, delete users ) as per your requirements and click on the All Done button.

How Automatic Provisioning Works?

1.By Admin Account:

• Navigate to the People tab (admin/people) in the top navigation bar of the Drupal Client site and click on the +Add user button.

• Fill in the user details and click on the Create new account button.

• The status of the user can be checked in the AWS application by navigating to the Users tab.

2. By registering a new user from the login register window:

• Navigate to the create user window {Base URL}/user/register.
• Enter the user information and click on the Create new account button.

• The status of the user can be checked in the AWS application by navigating to the Users tab.

You can see the user has been successfully provisioned to the Drupal Server site.

Congratulations, you have successfully set up AWS as the SCIM Server and Drupal as the SCIM Client.

If the Provision was not successful, please contact us at drupalsupport@xecurify.com. Please send the screenshot of the error window, and we will assist you in resolving the issue and guiding you through the setup.

Why choose us:

24/7 Support

The Drupal developers at miniOrange offer quick and active support for your queries. We can assist you from choosing the best solution for your use case to deploying and maintaining the solution.

 Contact us

Case Studies

miniOrange has successfully catered to the use cases of 400+ trusted customers with its highly flexible/customizable Drupal solutions.

 Read more

Other Solutions

Feel free to explore other Drupal solutions that we offer the popular solutions used by our trusted customers include 2FA, User Provisioning, Website Security.

 Know More