Troubleshooting AWS Organization Sync Failure

Error-HTTP Error Response: 401 Unauthorized with error response for url=https://scim.us-west-2.amazonaws.com/<Tenant_ID>/scim/v2/Groups

Root Cause:

The configuration value for AWS SSO SCIM Access Token. (Required for SSO Groups) is invalid or expired.

Open

Solution:

Login to AWS Account which is the master account for your AWS organization. Navigate to IAM Identity Center. Click the Actions drop down to the right of Identity source and click Manage provisioning.

Open

Click Generate token to generate new Token.

Open

Copy the generated token.

Open

Use this token for the configuration value for AWS SSO SCIM Access Token. (Required for SSO Groups) and click Sync Now.