Enabling SSO with Corporate Account Identities Using SAML

IAM Identity Center enables identity federation using the widely adopted SAML 2.0 standard. SAML 2.0 allows the secure exchange of user information between an IdP and a service provider (SP). With IAM Identity Center, authorized users can enjoy federated SSO access to applications within the AWS Management Console.

By integrating SAML IdP capabilities into your managed Microsoft AD or IAM Identity Center identity store, users can seamlessly sign in to SAML-supported services. This includes the AWS Management Console and popular third-party applications such as Microsoft 365, SAP Concur, and Salesforce. IAM Identity Center leverages the exchanged SAML assertions to facilitate a smooth and secure user experience across multiple platforms.

While SAML is primarily used within an enterprise environment, you may want to have outside users gain specific access to data or services in your account. Social federation can be of help...