Single Sign-On (SSO)
Identity & AccessSingle Sign-On (SSO) allows users to authenticate once and gain access to multiple AWS accounts and business applications. In AWS, this is implemented through IAM Identity Center (formerly AWS SSO), which provides a user portal where users can see and access all accounts and applications they are authorized for.
Key Features
- Centralized user management with built-in directory or external IdP (Active Directory, Okta)
- Permission Sets - reusable collections of policies assigned to users/groups per account
- Multi-account access from a single portal
- Integration with business applications (Salesforce, Slack, etc.) via SAML
- Temporary credentials - no long-term access keys needed
Related AWS Services
Related Terms
The process of allowing external identities (corporate directory, social providers) to access AWS resources without creating IAM users, using SAML, OIDC, or IAM Identity Center.
An AWS identity with temporary credentials that can be assumed by users, services, or applications to perform actions without long-term access keys.
Using multiple AWS accounts to isolate workloads, environments, and teams, providing the strongest security boundary available in AWS.
Toc Consulting: AWS Security & Cloud Architecture
Securing your AWS estate?
Our team helps engineering teams secure and architect AWS the right way: assessment in week one, a prioritized action plan in week two.