How to Update IAM Identity Domain & Portal URL in AWS

Select Language:

Changing the access portal URL in AWS IAM Identity Center is a one-time process. Once you’ve set it, you can’t modify it later through the console, command line interface, or other methods. If you need a different URL, the last resort is to delete the IAM Identity Center service entirely and start fresh. Keep in mind, this approach has some serious consequences:

– Deleting IAM Identity Center will remove all users, groups, and their assignments from your directory.
– During the setup process again, your users will temporarily lose access to all AWS accounts and applications linked through IAM Identity Center until you restore the assignments.
– If you previously customized your URL, deleting IAM Identity Center will free up that alias, making it available for reuse elsewhere.

If you are switching your identity source, like moving between IAM Identity Center and Active Directory, be aware that the default AWS access portal URL will change. It becomes important to notify your team about the new URL. Make sure to update bookmarks, firewall allow-lists, and any integrations that reference the old URL to avoid disruption.

For those using external identity providers, you can update the Identity Provider’s metadata—such as the sign-in URL and issuer URL—through the IAM Identity Center settings. This is done under Settings > Identity source > Manage Authentication, but note that this does not impact your main AWS access portal URL.

Given how limited options are, it’s best to carefully select your portal URL at the initial setup to prevent complications later. Making changes afterwards is not straightforward and can cause unnecessary disruptions.