Cloud platforms
AvailableAWS IAM Identity Center
By Amazon Web Services
SAML 2.0 sign-in through AWS IAM Identity Center (formerly AWS SSO). SCIM user provisioning from Qorionix is not available.
What you can connect
Capabilities and availability
Each capability has its own setup and status. Review the details before enabling it for your organisation.
SAML single sign-on
AvailableSetup available in the console
User provisioning
PlannedSetup is not available yet
Automatic user provisioning from Qorionix to this app is not available. Users and groups will not be created or updated in the app through this integration. To provision users into Qorionix, use the inbound SCIM 2.0 service at /api/v1/scim/v2. Provider requirements and limitations: Outbound provisioning is not available through this integration. AWS rejects SCIM group writes unless the group already exists in the identity store, so group sync is limited to membership updates on existing groups.
Automatic user provisioning from Qorionix to this app is not available. Users and groups will not be created or updated in the app through this integration. To provision users into Qorionix, use the inbound SCIM 2.0 service at /api/v1/scim/v2.
What to know before connecting
Automatic user provisioning from Qorionix to this app is not available. Users and groups will not be created or updated in the app through this integration. To provision users into Qorionix, use the inbound SCIM 2.0 service at /api/v1/scim/v2. Provider requirements and limitations: Outbound provisioning is not available through this integration. AWS rejects SCIM group writes unless the group already exists in the identity store, so group sync is limited to membership updates on existing groups.
More in Cloud platforms
Cloud platforms
AWS CloudTrail
Console sign-ins, IAM changes and every API call recorded by CloudTrail, pulled from the S3 bucket the trail writes to and parsed into named fields.
Cloud platforms
Amazon GuardDuty
Imports GuardDuty findings — unauthorized API calls, compromised credentials, anomalous network behaviour — from a tenant's own AWS account into the Qorionix SIEM incident queue. Read-only: does not archive, suppress or resolve findings in AWS.
Cloud platforms
Azure Activity Log
Subscription-level control-plane and service health events from Azure Activity Log — who created, modified or deleted which resource, polled every five minutes and parsed into named fields.