List of supported attributes in IAM Identity Center

Question

AWS provided an official document which lists out the supported attributes of in IAM Identity Center (AWS SSO) (Under section: Supported IAM Identity Center attributes)

However I found that the list is incompleted. For example ${user:employeeid} is not in the list but still can be mapped and returned in SAML assertion.

My question is: 
Is there a list or command can listed out all the supported attributes when using **Identity Center directory ** as source? I would like to use other attributes like User Type in the user profile.

Thanks,
Ray

Answer

All SCIM attributes defined in [RFC 7643 Section 8.3](https://www.rfc-editor.org/rfc/rfc7643#section-8.3) are supported except for the handful of user and group attributes listed on [this documentation page](https://docs.aws.amazon.com/singlesignon/latest/userguide/supported-attributes.html#user-object-attributes).  The shorter list of attributes found at https://docs.aws.amazon.com/singlesignon/latest/userguide/attributemappingsconcept.html#supportedssoattributes are for mapping to AWS Managed Microsoft AD.

List of supported attributes in IAM Identity Center

相关内容