- AWS SSO provides a user portal so users can find and sign in to all of their assigned AWS accounts and business applications in one place.
- The AWS SSO application configuration wizard helps you extend SSO access to any application that supports SAML 2.0.
- AWS SSO also offers pre-built-in SAML integrations to many business applications, including Salesforce, Box, and Office 365.
- AWS SSO can connect to on-premises Active Directory (AD) or AWS Managed Microsoft AD directory using AWS Directory Service.
- To connect to on-prem AD, AWS Directory Service has the following two options:
- Create a two-way trust relationship between AWS Managed Microsoft AD and an on-premises Active Directory;
- Create an AD Connector
- AWS SSO does not support SAMBA4-based Simple AD as a connected directory.
AWS SSO Supported Applications:

Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-saml.html
