awslabs / awslabs/ssosync

Clear expectations of sync modes

Open
#286 4 comments 0 reactions 1 assignee Claimed by @ChrisPates View on GitHub
documentation
Dominant language
Go
Stars
666
Forks
213
Avg merge
1d 7h
Merged PRs (30d)
4

Description

**Describe the bug**
Ssosync unexpectedly creates and deletes users when sync_method is set to _groups_.

**Expected behavior**
Sync_method _groups_ should only create, delete and edit group membership, and not create or delete Identity Center users. At minimum it is not clear in documentation, and assumption could be made that _groups_ method will sync only groups and their membership, and _users_groups_ would create and delete also users.

**Additional context**
In my case I've already configured regular SCIM provisioning from Google Workspace to AWS IAM Identity Center. Having ssosync touching these users feels a bit redundant.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.