# Keycloak and AWS IAM Identity Center SCIM integration

**URL:** <https://forum.keycloak.org/t/keycloak-and-aws-iam-identity-center-scim-integration/24534>\
**Category:** Extending the server\
**Created:** [February 13, 2024, 3:37am UTC](https://forum.keycloak.org/t/keycloak-and-aws-iam-identity-center-scim-integration/24534 "2024-02-13T03:37:23Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![wgoulet](https://avatars.discourse-cdn.com/v4/letter/w/dbc845/32.png) [@wgoulet](https://forum.keycloak.org/u/wgoulet)\
**Post date:** [February 13, 2024, 3:37am UTC](https://forum.keycloak.org/t/keycloak-and-aws-iam-identity-center-scim-integration/24534/1 "2024-02-13T03:37:23Z")

</div>

Hi all,

Cross-posting a note I sent to the keycloak-dev google group for more visibility/feedback:

from: [https://groups.google.com/g/keycloak-dev/c/pwXDs3CwG30/m/sZPCpNewBwAJ](https://groups.google.com/g/keycloak-dev/c/pwXDs3CwG30/m/sZPCpNewBwAJ)  
After doing some research I found that there was no out of the box support for provisioning Keycloak users and groups to AWS. I’ve created a small project to address this need and I’d appreciate a few beta testers. This project implements an EventListener SPI to forward admin events for user/group creation/update/deletes to a Python program that implements an AWS IAM Identity Center SCIM client.

I’d love to get some feedback from the community on my approach here; I plan on blogging about this later after I get some initial feedback.

The project homepage is [GitHub - wgoulet/scim-keycloak-bridge](https://github.com/wgoulet/scim-keycloak-bridge); as noted above it is currently a beta release.

Thanks!  
Walter