AWS SSO – Learning Notes

  • AWS SSO provides a user portal so users can find and sign in to all of their assigned AWS accounts and business applications in one place.
  • The AWS SSO application configuration wizard helps you extend SSO access to any application that supports SAML 2.0.
  • AWS SSO also offers pre-built-in SAML integrations to many business applications, including Salesforce, Box, and Office 365.
  • AWS SSO can connect to on-premises Active Directory (AD) or AWS Managed Microsoft AD directory using AWS Directory Service.
  • To connect to on-prem AD, AWS Directory Service has the following two options:
    • Create a two-way trust relationship between AWS Managed Microsoft AD and an on-premises Active Directory;
    • Create an AD Connector
  • AWS SSO does not support SAMBA4-based Simple AD as a connected directory.

AWS SSO Supported Applications:

Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-saml.html

Leave a comment