awslabs/ssosync

View on GitHub

Populate AWS SSO directly with your G Suite users and groups using either a CLI or AWS Lambda

Stars: 666
Forks: 213
Open beginner issues: 2
Indexed issues: 35
Avg merge: 2d 1h
Merged PRs (30d): 3

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 19, 2026
Latest indexed: Sep 14, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

32 open issues indexed

Q4 — --group-match filter and Control Tower group safety Open

Support

Difficulty 3/5 1-2 days Newbie friendliness 48/100

awslabs/ssosync#366 · 4 comments · Opened Sep 15, 2026
Q3 — Custom Google attribute for username matching (AWS_Username) Open

Support

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

awslabs/ssosync#365 · 1 comment · Opened Sep 15, 2026
Q2 — Will ssosync take ownership of an existing AWS group if the name matches, or always create new? Open

Support

Difficulty 4/5 3-5 days Newbie friendliness 35/100

awslabs/ssosync#364 · 1 comment · Opened Sep 15, 2026
Q1 — How does ssosync name/identify groups in AWS Identity Center? Open

Support

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

awslabs/ssosync#363 · 1 comment · Opened Sep 15, 2026
Question: Migrating from Okta SCIM — group matching behaviour, AWS_Username custom attribute, and Control Tower safety Open

Support

Difficulty 4/5 3-5 days Newbie friendliness 35/100

awslabs/ssosync#362 · 4 comments · Opened Sep 15, 2026
Keyless Google auth via Workload Identity Federation (no downloaded service-account key) Open

Difficulty 4/5 3-5 days Newbie friendliness 68/100

awslabs/ssosync#345 · 5 reactions · Opened Jul 16, 2026
Limited Permissions Service Account Open

enhancement

Difficulty 1/5 1-3 hours Newbie friendliness 74/100

awslabs/ssosync#323 · Opened May 25, 2026
Service Account with minimal Permissions and scope Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

awslabs/ssosync#322 · Opened May 25, 2026
Workload Identity federation - integrated with IAM Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 30/100

awslabs/ssosync#321 · Opened May 25, 2026
Least Privilege : Google Workspace Directory Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

awslabs/ssosync#320 · Opened May 25, 2026
Wildcard support for ignore lists and improved deletion safety Open

Difficulty 4/5 3-5 days Newbie friendliness 50/100

awslabs/ssosync#305 · Opened Mar 14, 2026
Clear expectations of sync modes Open

documentation

awslabs/ssosync#286 · 4 comments · 1 assignee · Opened Nov 19, 2025
Terraform deployments - misconfiguration? Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

awslabs/ssosync#273 · 5 comments · Opened Oct 7, 2025
QuickStart Cfn Templates Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 30/100

awslabs/ssosync#271 · Opened Sep 29, 2025
Develop standardize functional test Open

awslabs/ssosync#269 · 1 assignee · Opened Sep 26, 2025
Cfn Template for webhook receiver Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

awslabs/ssosync#267 · Opened Sep 22, 2025
Update SAR template to use the most cost Optimized parameter/secret storage. Open

Difficulty 2/5 1-3 hours Newbie friendliness 42/100

awslabs/ssosync#260 · 1 reaction · Opened Sep 5, 2025
eventDriven replication :Use Google Directory changes to trigger updates based on the events, and reduce frequency of 'full sync' based execution. Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

awslabs/ssosync#240 · 2 comments · 1 reaction · Opened Apr 29, 2025
Improve error messages for api failures Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

awslabs/ssosync#239 · Opened Apr 26, 2025
Documentation missing for Google service account setup Open

documentation enhancement

Difficulty 4/5 3-5 days Newbie friendliness 38/100

awslabs/ssosync#229 · 1 comment · 5 reactions · Opened Feb 6, 2025
Add an option to revoke active sessions before user deletion Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

awslabs/ssosync#228 · 1 reaction · Opened Jan 17, 2025
Possible to map Group names or remove a prefix? Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

awslabs/ssosync#217 · 1 comment · 1 reaction · Opened Sep 15, 2024
When deleting groups/users, delete corresponding group memberships, permission set assignments, etc. Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

awslabs/ssosync#208 · Opened Aug 8, 2024
SAM CLI validation is incorrect Open

bug

awslabs/ssosync#193 · 1 comment · 1 assignee · Opened Apr 16, 2024
Allow GWS service accounts without impersonation Open

duplicate enhancement

awslabs/ssosync#192 · 3 comments · 2 reactions · 1 assignee · Opened Apr 16, 2024
Update SAR ReadMe Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

awslabs/ssosync#185 · Opened Mar 25, 2024
DeletePolicy Protection for Secrets and Keys Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

awslabs/ssosync#182 · Opened Mar 22, 2024
Expand the Options for storing the sensitive parameters to include binary secrets and SSM Parameter Store Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 38/100

awslabs/ssosync#180 · 2 comments · 1 reaction · Opened Mar 21, 2024
Configurable handling of 'manually created' Users/Groups in IAM Identity Center Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

awslabs/ssosync#179 · 5 comments · 15 reactions · Opened Mar 21, 2024
Expand user attribute replication Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 30/100

awslabs/ssosync#178 · 2 reactions · Opened Mar 21, 2024
Support for Workload Identity Federation Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 45/100

awslabs/ssosync#168 · 1 comment · 4 reactions · Opened Feb 2, 2024
Docker image Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 30/100

awslabs/ssosync#126 · 2 comments · 5 reactions · Opened Mar 7, 2023

awslabs/ssosync

Get new issues in your inbox