SCS-C02 Question 289
Select 2Your organization has implemented AWS IAM Identity Center (AWS Single Sign-On) to centrally manage access to AWS accounts and applications. You are tasked with integrating an existing on-premises Active Directory (AD) with AWS IAM Identity Center to allow users to sign in using their corporate credentials. Which of the following steps are required to achieve this integration?
- A
Configure a trust relationship between AWS IAM Identity Center and the on-premises Active Directory.
- B
Set up the AWS Directory Service with Active Directory Connector to establish communication with the on-premises AD.
- C
Enable multi-factor authentication (MFA) for users in the on-premises Active Directory.
- D
Use AWS IAM Identity Center to assign permissions to users and groups synchronized from the on-premises AD.
- E
Install a federation proxy server on the on-premises Active Directory to support AWS IAM Identity Center.
Show answer and explanation
Correct answers: B, D
Explanation
To integrate an on-premises Active Directory with AWS IAM Identity Center, you must use AWS Directory Service with Active Directory Connector to establish communication. Once the connection is established, users and groups from the on-premises AD can be synchronized, and permissions can be assigned to them in AWS IAM Identity Center. Trust relationships or federation proxy servers are not required for this integration.
- A. Incorrect.
Configuring a trust relationship is not required for AWS IAM Identity Center to integrate with on-premises Active Directory. Instead, the integration involves using AWS Directory Service.
- B. Correct.
Setting up AWS Directory Service with Active Directory Connector is a necessary step to establish communication between AWS and the on-premises AD. This allows user identities to be synchronized.
- C. Incorrect.
Enabling MFA on the on-premises AD is not a required step for integration. However, MFA can be configured separately in AWS IAM Identity Center for additional security.
- D. Correct.
Using AWS IAM Identity Center to assign permissions to users and groups synchronized from the on-premises AD is required. This ensures users have the appropriate access to AWS accounts and applications.
- E. Incorrect.
Installing a federation proxy server is not necessary when integrating AWS IAM Identity Center with on-premises AD, as AWS Directory Service handles the connection.