[SOLVED] How to retrieve groups for a specific user using the AWS SSO SCIM API?

How to retrieve groups for a specific user using the AWS SSO SCIM API?

I am trying to use the AWS SSO SCIM API in order to retrieve the AWS SSO groups for a particular user.

Looking at the documentation https://docs.aws.amazon.com/singlesignon/latest/developerguide/listgroups.html

It mentions the following

To see group info for a certain member, call ListGroup with a member filter
If you're using the member filter, you have to use the id filter (refer to supported filter combinations).
It appears that the id filter, is the group ID, because of this note: Note that the use of id as an individual filter, while valid, should be avoided as there is already a getGroup endpoint available.

Also, at https://docs.aws.amazon.com/singlesignon/latest/developerguide/limitations.html next to the members attribute it mentions that it is supported, but cannot be read in a response.

I have been playing with the API but could not get any group info for a user regardless of the combination of the parameters.

Based on the above, I conclude that the API does not support retrieving group data for a user. Would you agree?

Solution

As @ZollnerdMSFT recommended, I raised an AWS support request. AWS support responded that the AWS SSO SCIM API does not support retrieving the groups associated with a user. They have submitted this as a feature request internally, however, cannot provide an estimate as to when it will be implemented.