Identity Governance Integrations

Report an Issue

Is this page helpful?

How can we improve this page?

View as Markdown

Identity Governance is available only with Teleport Enterprise.

You can configure Teleport to sync role-based access control (RBAC) configurations with third-party software, such as AWS IAM Identity Center, Microsoft Entra ID, and Okta. Teleport creates resources such as roles and Access Lists based on resources it retrieves from the integration. This way, you can manage all access controls in your infrastructure from a single platform.

Review imported access

Once an integration imports resources into Teleport, you can use Teleport Identity Security to review which identities can access them. See Review Identity Access from the CLI (tctl access-review).

Read the following guides for how to configure the Identity Governance integration for your third-party solution:

• AWS IAM Identity Center (section): Provides an overview of the Teleport AWS IAM Identity Center integration.
• Microsoft Entra ID (section): Describes how Entra ID integration works in Teleport.
• SCIM (section): How to manage Access List membership using SCIM integration
• Okta (section): Describes how to set up the Teleport Okta integration in order to grant Teleport users access to resources managed in Okta.