CuraDevOps

Plan active

AWS IAM Identity Center now preserves identities when migrating from AD

2026-10-21 15:46 UTC · AWS What's New · read the source ↗ #aws-iam#identity-management#active-directory
  • Platform/SRE — Plan: New GA capability removes a major operational barrier: migrating IAM Identity Center from Active Directory to an external IdP (Okta, Entra ID) no longer requires recreating users, groups, and permission assignments. If an AD-to-IdP identity migration is on the roadmap, schedule an evaluation of this simplified path.
  • CI/CD — Skip
  • Leader — Learn: This lowers the migration cost for orgs considering a shift from on-prem AD to a cloud IdP as their AWS identity source — a previously high-friction strategic move is now substantially simpler, which may shift the build-vs-buy calculus for identity infrastructure.
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.