AWS IAM Identity Center attributes and error handling

The document lists the supported AWS IAM Identity Center attributes and their mapped Cloud Directory attributes along with other details.

Supported attributes

Table 1. Attributes

Attribute name	Definition	Mapped Cloud Directory attribute (default mapping)	Type	Mandatory	Modifiable
userName	The unique identifier for the user	userName	String	Yes	No
Email	User's email address	email	String	No	No
name.formatted	The user's full name	name	String	No	Yes
name.familyName	The user's family name or surname	family_name	String	Yes	Yes
name.middleName	The user's middle name	None	String	No	Yes
name.givenName	The user's given name	given_name	String	Yes	Yes
displayName	The user's name	None	String	Yes	Yes
nickName	The user's nickname	None	String	No	No
phoneNumber	The user's phone number	mobile_number	String	No	Yes
title	The user's title	job_title	String	No	Yes
userType	Identifies the relationship between the organization and the user.	None	String	No	Yes
preferredLanguage	The user's preferred language	language	String	No	Yes
locale	The user's default location	None	String	No	Yes
timezone	The user's time zone	None	String	No	Yes
address	The user's mailing address	None	String	No	Yes
employeeNumber	Typically a numeric or alphanumeric identifier that is assigned to the user.	employee_id	String	No	Yes
costCenter	The name of a cost center.	None	String	No	Yes
organization	The name of an organization	None	String	No	Yes
department	The name of a department	department	String	No	Yes
division	The name of a division	None	String	No	Yes
manager	The user's manager	None	String	No	Yes

Error handling

Table 2. Error codes

Sr. No.	Status code	Definition
1.	400	Invalid input error.
2.	401	Authentication error.
3.	403	Forbidden error.
4.	404	Resource not found error.
5.	409	Resource conflict error.