Skip to content

Latest commit

 

History

History
18 lines (14 loc) · 973 Bytes

identity-center.md

File metadata and controls

18 lines (14 loc) · 973 Bytes
Raw

IAM Identity Center (Successor to AWS Single Sing-On - SSO)

  • A way to use existing enterprise identity store with AWS
  • Allows to centrally manage SSO access to multiple AWS accounts and external business applications as well
  • Replaces the historical uses cases provided by SAML 2.0
  • Flexible Identity store: where identities are stored. Allows for external identities to be swapped with AWS credentials
  • IAM Identity Center supports the following type of identity stores:
    • Built-in identity store
    • AWS Managed Microsoft AD
    • On-premise Microsoft AD (Two way trust or AD Connector)
    • External Identity Provider - SAML 2.0
  • IAM Identity Center is preferred by AWS for any "workforce" (enterprise) identity federation over the traditional SAML 2.0 based identity federation

IAM Identity Center Architecture

IAM Identity Center

  • A requirement of IAM Identity Center is that we should have a valid AWS Organization created