> ## Documentation Index
> Fetch the complete documentation index at: https://nango.dev/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# AWS (SCIM) - How do I link my account?

# Overview

To authenticate with AWS SCIM, you need two key pieces of information:

1. **SCIM API Token** - A token generated from your AWS IAM Identity Center to authenticate SCIM requests.
2. **SCIM Endpoint** - The base domain for SCIM API requests.

This guide will walk you through the steps to generate and use this token to connect your AWS account.

***

### Prerequisites:

* You must have an AWS account.
* SCIM is supported only for IAM Identity Center users and not for IAM users.
* The logged-in user must have the necessary admin privileges to generate the SCIM API token in IAM Identity Provider.

***

## Step 1: Configure the external identity Provider

1. Log into your AWS account
2. Go to **IAM Identity Center > Settings**
3. In the **Identity Source** tab, click on **Actions > Change identity source**
4. Choose **External identity provider** as your identity source
5. On the next screen, configure the external identity provider
6. Review and save the changes

<img src="https://mintcdn.com/nango/UE5P_t6Tqhl3q1Vr/integrations/all/aws-scim/change-idp.png?fit=max&auto=format&n=UE5P_t6Tqhl3q1Vr&q=85&s=330bee6b19aef394d8ae008181036fac" width="2880" height="1546" data-path="integrations/all/aws-scim/change-idp.png" />

<img src="https://mintcdn.com/nango/UE5P_t6Tqhl3q1Vr/integrations/all/aws-scim/choose-idp.png?fit=max&auto=format&n=UE5P_t6Tqhl3q1Vr&q=85&s=eb9fb6c279c6a0101c232f9aafd5bfe0" width="2880" height="1546" data-path="integrations/all/aws-scim/choose-idp.png" />

<img src="https://mintcdn.com/nango/UE5P_t6Tqhl3q1Vr/integrations/all/aws-scim/configure-idp.png?fit=max&auto=format&n=UE5P_t6Tqhl3q1Vr&q=85&s=4e75a8aace6620797bea38c0a633bfe6" width="2880" height="1546" data-path="integrations/all/aws-scim/configure-idp.png" />

## Step 2: Setting up Automatic Provisioning

1. Once you've setup SAML, you'll see an **Automatic Provisioning** card on Settings page
2. Click on **Enable** in the left sidebar to enable SCIM
3. The SCIM configuration will be shown, copy the **SCIM Endpoint** and **Access Token** to connect to AWS.

<img src="https://mintcdn.com/nango/UE5P_t6Tqhl3q1Vr/integrations/all/aws-scim/enable-automatic-provisioning.png?fit=max&auto=format&n=UE5P_t6Tqhl3q1Vr&q=85&s=45ef123b58785e4e813295b2aa2c2c5d" width="2880" height="1546" data-path="integrations/all/aws-scim/enable-automatic-provisioning.png" />

<img src="https://mintcdn.com/nango/UE5P_t6Tqhl3q1Vr/integrations/all/aws-scim/setup-scim.png?fit=max&auto=format&n=UE5P_t6Tqhl3q1Vr&q=85&s=247446b364622a75b23b37c107ea5ee1" width="2880" height="1546" data-path="integrations/all/aws-scim/setup-scim.png" />

**Important**: Copy and store your Access Token securely.

## Step 3: Connect Your AWS Account

To authenticate using your Access Token, navigate to the AWS (SCIM) authentication form in Nango and enter the SCIM endpoint and Access Token.

<img src="https://mintcdn.com/nango/UE5P_t6Tqhl3q1Vr/integrations/all/aws-scim/form.png?fit=max&auto=format&n=UE5P_t6Tqhl3q1Vr&q=85&s=2b9aeeec2605caeddd4310d1a0de80d5" width="920" height="1242" data-path="integrations/all/aws-scim/form.png" />

Click "Connect" to complete the authentication.
