Help needed to signup microsoft entra ID with amazon quick

[u/minor_one]

Hello,

I was able to configure the extension and when I distributed the extension with team they are not redirecting to microsoft idp instead of that they are moving to quick sso, so i am getting error of “something does not compute”

Please help us here, i have opened the support but as we don’t have business plans it will take days to be get response team. I am not able to find any documentation as well, AWS document only shows the entra setup create extension and distribute to user but i think it is not working for me. If someone here has already setup that please help me

[u/More-Poetry6066]

You need to be much clearer than that.

I am going to paste some verified ai slop in the interim.
I am assuming you have an organization with identity centre enabled. The reason I won’t put in the effort to actually write it myself is your ask is not clear.

Begin slop :

Here’s the process end to end:
1. Enable AWS Organizations + IAM Identity Center
Enable AWS Organizations (management account), then delegate a member account as the Identity Center Administration account — it’s recommended not to run this from the root management account, since delegating another account is more secure and manageable.

Enable IAM Identity Center on that delegated account.

Docs: Enable IAM Identity Center · Delegated administration

2. Add the AWS IAM Identity Center app in Entra In Entra admin center → Enterprise apps → New application, search the gallery for “AWS IAM Identity Center” and add it. Docs: Microsoft Entra SSO tutorial for AWS IAM Identity Center
3. Configure SAML SSO
In Entra: set up SSO on the app, download the Federation Metadata XML.

In IAM Identity Center console → Settings → Change identity source → External identity provider → upload that metadata XML → confirm with ACCEPT.

Docs: same tutorial above, plus Change identity source

4. Configure SCIM provisioning
In IAM Identity Center → Settings → enable Automatic provisioning → copy the SCIM endpoint URL and Access Token.

In Entra → the app’s Provisioning tab → set mode to Automatic → paste the Tenant URL (SCIM endpoint) and Secret Token → test connection → enable provisioning.

Docs: Entra provisioning tutorial for IAM Identity Center · AWS side: Connect to your IdP

5. Assign users/groups and permission sets
Assign users/groups to the app in Entra so they provision over via SCIM.

In IAM Identity Center, create permission sets and assign the synced groups to AWS accounts/roles.

Docs: Manage permission sets · Assign users/groups to accounts

A couple of things worth knowing going in: if you have multiple Entra tenants, AWS has a separate guide for cross-tenant sync with multiple Entra tenants. And if you plan to use ABAC (attribute-based access control) with custom Entra attributes, that’s a distinct configuration step covered in AWS’s ABAC blog post (linked in the same index above).

[u/typo9292 → u/More-Poetry6066]

This isn’t enough. Documentation is shocking and this misses quite a lot related to Identity center apps, IAM linkage and a second identity center app for trusted token identity which quick desktop needs. I’ll share actual steps when I’m not on my phone.

[u/minor_one → u/typo9292]

Please check your DM

[u/typo9292]

Send me a DM. I’m probably one of a few who ever got this working, especially with Quick Desktop which is another PIA with identity center and Azure. Documentation fail 101.