Amazon
SCS-C03 · Question #9
A company uses AWS IAM Identity Center with SAML 2.0 federation. The company decides to change its federation source from one identity provider (IdP) to another. The underlying directory for both IdPs
Sign in or unlock SCS-C03 to reveal the answer and full explanation for question #9. The question stem and answer options stay visible for context.
Submitted by hans_de· Mar 6, 2026Identity and Access Management
Question
A company uses AWS IAM Identity Center with SAML 2.0 federation. The company decides to change its federation source from one identity provider (IdP) to another. The underlying directory for both IdPs is Active Directory. Which solution will meet this requirement?
Options
- ADisable all existing users and groups within IAM Identity Center that were part of the federation
- BModify the attribute mappings within the IAM Identity Center trust relationship to match
- CReconfigure all existing IAM roles in the company's AWS accounts to explicitly trust the new IdP
- DConfirm that the Network Time Protocol (NTP) clock skew is correctly set between IAM Identity
Unlock SCS-C03 to see the answer
You've previewed enough free SCS-C03 questions. Unlock SCS-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#SAML 2.0 federation#IdP migration#attribute mapping#IAM Identity Center