Can we enforce the use of hardware tokens only for some users in AWS IAM identity center users?
Hi all
I know if administrator enables MFA, users must sign in to the AWS access portal with two factors - https://docs.aws.amazon.com/singlesignon/latest/userguide/enable-mfa.html. I'd love to enforce the use of hardware tokens only for some users in AWS IAM identity center users. Is it possible?
Thanks.
- Balises
- Centre d’identité IAM AWS
- Langue
- English
demandé il y a 2 ans193 vues
- Le plus récent
- Le plus de votes
- La plupart des commentaires
Unfortunately, it's not possible with Identity Center if you're using the IdC native directory. If you're using an external SAML-based identity provider, then MFA is handled on the identity provider side. So you'd have to look at what's supported by the identity provider.
IAM Identity Center lacks selective MFA device enforcement, but integration with an external IdP, additional Identity Center instances, or custom flows with Cognito can provide alternatives to achieve similar MFA control over selected user groups.
répondu il y a 2 ans
Contenus pertinents
demandé il y a 9 mois
demandé il y a 9 mois
demandé il y a un an
- AWS OFFICIELA mis à jour il y a 8 mois
Hi, @Basel Mohamed, can you elaborate on how to do that? Any references? Thanks.