AWS preserves workforce access when customers move off Active Directory

AWS IAM Identity Center now preserves workforce identities and access assignments when organizations switch from Active Directory to an external identity provider or the Identity Center directory, AWS announced. Previously, customers had to recreate those records. The change retains users, groups, memberships, permission sets and application assignments, including their existing identifiers. Policies referencing those identifiers continue to work, and users retain access to AWS accounts and applications. Organizations must still configure the new sign-in source. The feature covers organization instances in every Region where IAM Identity Center is available; switching to Active Directory works as before.