You're reading from Implementing Identity Management on AWS A real-world guide to solving customer and workforce IAM challenges in your AWS cloud environments

Product type Paperback

Published in Oct 2021

Publisher Packt

ISBN-13 9781800562288

Length 504 pages

Edition 1st Edition

Tools

AWS

Concepts

Identity Management

Author (1):

Jon Lehtinen

View More author details

Table of Contents (17) Chapters

Preface

1. Section 1: IAM and AWS – Critical Concepts, Definitions, and Tools

2. Chapter 1: An Introduction to IAM and AWS IAM Concepts FREE CHAPTER

3. Chapter 2: An Introduction to the AWS CLI

4. Chapter 3: IAM User Management

5. Chapter 4: Access Management, Policies, and Permissions

6. Chapter 5: Introducing Amazon Cognito

7. Chapter 6: Introduction to AWS Organizations and AWS Single Sign-On

8. Chapter 7: Other AWS Identity Services

9. Section 2: Implementing IAM on AWS for Administrative Use Cases

10. Chapter 8: An Ounce of Prevention – Planning Your Administrative Model

11. Chapter 9: Bringing Your Admins into the AWS Administrative Backplane

12. Chapter 10: Administrative Single Sign-On to the AWS Backplane

13. Section 3: Implementing IAM on AWS for Application Use Cases

14. Chapter 11: Bringing Your Users into AWS

15. Chapter 12: AWS-Hosted Application Single Sign-On Using an Existing Identity Provider

16. Other Books You May Enjoy

Configuring AWS SSO in the Management Console

In this section, we will configure AWS SSO to be an identity provider using the Management Console. For this exercise, we will set up AWS SSO as the identity store and identity provider without connecting it to any pre-existing installations, as those scenarios will be explored more fully in Chapters 10 and 12. Our objective here is to become familiar with the service and its basic administration before we leap into those other deployment patterns.

As usual, we start by signing into our Management Console. If we have not configured the AWS SSO service with this account, we are greeted with a screen that invites us to enable the service:

Figure 6.42 – The AWS SSO activation banner

The banner informs us that when we enable AWS SSO, we will allow it to create AWS IAM roles for each of the AWS accounts within our AWS organization. It also warns us that those organization member accounts will be able to assign...