Prerequisites

1. An Application admin role in AWS Identity Center account.
2. AWS account root user permissions.
3. SSO setup for AWS Identity Center

In Amazon AWS Identity Center: Enable SCIM and generate token

The Access token will be shown only once and should not be written anywhere else as anyone with access to it can add/edit/remove users in AWS Identity Center.

In Zoho Directory: Set up provisioning

1. Sign in to Zoho Directory, then click Admin Panel in the left menu.
   

   Ensure that you have set up SSO for AWS Identity Center.
2. Click App Management, and the Applications module opens by default.
3. Click Add Application, then search and add AWS Identity Center.
4. Go to Provisioning, then click Configure.
   
   
   
   
5. Enter the SCIM endpoint and Access Token you copied from Amazon AWS Identity Center in the Sync endpoint and SCIM Token fields.
   
6. Click Authorize.
   
7. Select the fields that have to be synced with AWS Identity Center, and map a relevant Zoho Directory field with them. If you'd like to have a constant value to be set in AWS Identity Center for any fields, click Edit next to the field, enter the value in the Hardcoded value field, then click OK.
   

By default, all AWS Identity Center fields will be mapped to a relevant Zoho Directory field. To change this mapping, you should have the Standard or Professional plans in Zoho Directory.

8. Click Save and Next.

1. Create users: Assigning a user to AWS Identity Center in Zoho Directory automatically creates a new user account in AWS Identity Center.
2. Update User profile: If a user account already exists in AWS Identity Center for a user, any changes made to the mapped fields in user's profile in Zoho Directory will be synced with AWS Identity Center.
3. Delete users: Unassigning AWS Identity Center for the user from Zoho Directory will delete the user's account in AWS Identity Center.
4. Activate and deactivate users: If a user account already exists in AWS Identity Center for a user, assigning them to AWS Identity Center in Zoho Directory or unassigning them will activate or deactivate the user in AWS Identity Center. Additionally, activating or deactivating a user in Zoho Directory will also activate and deactivate them in AWS Identity Center.

1. All Users: All the users that can be imported from AWS Identity Center to Zoho Directory.
2. New Users: Users that are present in AWS Identity Center, but not in Zoho Directory. These users will be created in Zoho Directory, and AWS Identity Center will be assigned to them.
3. Update Users: Users already present in Zoho Directory. Any changes in the user profile for these users will not be synced, and the field values from AWS Identity Center will be used to overwrite the values in Zoho Directory.
4. Users to Activate: Users in Zoho Directory, but not assigned to AWS Identity Center in Zoho Directory. These users will be assigned to AWS Identity Center.
5. Users to Deactivate: Users that are either not present or present as inactive users in AWS Identity Center. These users will be unassigned from AWS Identity Center in Zoho Directory.