User created with AWS Identity Center gets 400 error when logging in

Question

I created a user in IAM Identity Center. I assigned them to a group and the group to my account. I assigned a persmission set AdministratorAccess (managed by AWS). The user can log in using mfa, choose the account, choose the permission set and they are shown 400 error - bad request.

I tried a different browser, a private mode etc. I tried a different email address. I deleted and created IAM Identity Center again. Nothing helps. I cannot see any reason for that.

I created the user to protect my root account as proposed in some guide here.

Can you help, pls?

vtjean · Answer

I would double check your MFA, Service Control Policies, Account Settings, and your Users permission to confirm if there's an explicit Deny that preventing access.
Also verify if there's a health issue: https://status.aws.amazon.com/

User created with AWS Identity Center gets 400 error when logging in

Añade tu respuesta

Contenido relevante