Amazon IAM Identity Center
AWS IAM Identity Center (successor to AWS Single Sign-On) is where you create, or connect, your workforce identities in AWS once and manage access centrally across your AWS organization. You can create user identities directly in IAM Identity Center, or bring them from Microsoft Active Directory, and then use IAM Identity Center to manage user access to AWS accounts and business applications with single sign-on.
APIs
AWS IAM Identity Center SSO Admin API
Manages permission sets, account assignments, instances, and SSO configurations for centralized identity and access management across AWS accounts and organizations.
AWS IAM Identity Center Identity Store API
Manages users, groups, and group memberships in the IAM Identity Center identity store, enabling programmatic provisioning of workforce identities.
Capabilities
Amazon IAM Identity Center - Identity and Access Management
Unified capability for IT administrators to manage workforce identities, provision access to AWS accounts, and configure SSO for enterprise applications.
Run with NaftikoFeatures
Create and manage workforce user identities directly or connect from an external identity provider.
Enable employees to sign in once and access all assigned AWS accounts and business applications.
Manage access to multiple AWS accounts from a single place using permission sets.
Connect Microsoft Active Directory, Okta, Azure AD, and other SAML 2.0 identity providers.
Define and reuse permission policies that can be assigned to users across multiple AWS accounts.
Automatically provision and de-provision users and groups using SCIM 2.0.
Use Cases
Enable employees to access all AWS accounts and business apps with a single set of credentials.
Manage access to dozens or hundreds of AWS accounts from a single control plane.
Grant temporary elevated access to AWS accounts without permanent permissions.
Centralize access logging and produce audit reports for security compliance reviews.
Integrations
Sync users and groups from Active Directory for SSO and access management.
Connect Okta as an external identity provider using SAML 2.0 and SCIM.
Federate with Azure AD for identity synchronization and SSO.
Manage access across all accounts in an AWS Organization from a single SSO configuration.