AWS IAM Identity Center

wikipedia:AWS IAM Identity Center (Jul 2022) (previously AWS Single Sign-On)

• https://aws.amazon.com/iam/identity-center/
• Pricing: Free of charge
• Permission sets: AdministratorAccess, PowerUserAccess

Supported identity source:

• External identity provider
• Active Directory
• Identity Center directory (free of charge, default)

• aws sso-admin

• Enable multi-account access to your AWS accounts
• Enable single sign-on access to your AWS applications
• Enable single sign-on access to Amazon EC2 Windows instances

Commands

• aws sso login
• aws configure sso
• aws sts assume-role
• aws sts get-session-token Only valid for IAM users

Terraform resources

• aws_identitystore_user
• aws_identitystore_group

Related

• Okta https://www.okta.com/blog/2020/05/how-okta-aws-iam-identity-center-simplifies-admin-and-adds-cli-support/
• JumpCloud
• SCIM protocol, Created by SCIM
• aws_ssoadmin_permission_set
• Maximum session duration, up to 7 days or custom duration.
• AWS access portal: https://d-xxxxxxxxxx.awsapps.com/start
• ssoins
• AdministratorAccess
• arn:aws:sso:::permissionSet
• AWS Verified Access (2023)
• Organization instances of IAM Identity Center
• AWS Organization
• EntraID: Identity - Applications - Enterprise applications
• Google IAM identity

Activities

• Configure the AWS CLI to use AWS IAM Identity Center. See also: AWS SSO token provider configuration https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html
• How to use Google Workspace as an external identity provider for AWS IAM Identity Center
• Multi-factor authentication for Identity Center users
• Connect Redshift with AWS IAM Identity Center for a single sign-on experience
• Configure the session duration of the AWS access portal and IAM Identity Center integrated applications

See also

• aws sso login, ~/.aws/sso/cache
• AWS SSO: aws sso, aws sso login, aws sso list-accounts, aws-sso-util, aws sso-admin
• aws identitystore [ create-user | create-group | list-groups | list-users ], Permission sets
• AWS SSO, aws sso, AWS access portal, aws_ssoadmin_permission_set, arn:aws:sso
• AWS IAM Identity Center, aws identitystore, AWS Identity Center directory, SSO, aws configure sso
• AWS users: AWS IAM users and/or Identity Center users, AWS Access Keys

https://aws.amazon.com/about-aws/whats-new/2022/07/aws-single-sign-on-aws-sso-now-aws-iam-identity-center/