Overview of the AWS IAM Identity Center

IAM Identity Center is designed to help centrally create and manage your workforce identities. This service is really an overlay of IAM and AWS Single Sign-On services. With the IAM Identity Center, you can use the default internal AWS IdP or connect and synchronize to an external IdP such as Microsoft AD Domain Services. This makes granting SSO capabilities much more straightforward than standard IAM.

You can use multi-account permissions to assign users access to all AWS accounts within AWS Organizations. This is a much easier approach than trying to configure cross-account access and multiple IAM roles to allow users from one AWS account access to other AWS accounts within your organization.

With the IAM Identity Center, you can also assign access to applications that integrate with the Identity Center or third-party applications that offer SAML 2.0 integration. Several use cases exist for using the IAM Identity Center instead of AWS...