HTTP 403 error when trying to access Management Console with Identity Center user

Question

Hi all, I have been getting the following error when trying to access AWS Management Console with IAM Identity Center users. These users have been granted the AdministratorAccess permission policies, and have been able to access the Management Console previously. Not sure what broke recently, but not able to access through the same way. 
We are able to login, but when we click on Management Console, this error pops up instead.  
"No access
Request ID: 886f725f-8cbc-43e9-aa2b-8a6895a6f1a2
HTTP status: 403"

Look forward to any kind advice. Thank you!

Accepted Answer

When you use permission sets, under the hood it creates roles in the accounts with a unique ID along with IDP's when you enable SSO.
* Has any of these roles been manually removed from the target accounts?
* Has the IDP in the target accounts been removed which is used by Identity centre?

Answer

Hi, this previous similar re:Post question had the same problem: https://repost.aws/questions/QU2cQ7kmJlRHae_TWzq5KzOg/giving-user-access-to-aws-console-via-identity-center

For them, the solution was:
```
After filling in the email address attribute for my AD User and allowing Identity Center to sync, 
my user and test account were able to login successfully.
```

So is email address attribute already entered in your case?

HTTP 403 error when trying to access Management Console with Identity Center user

Relevant content