What's the criteria for WorkSpaces directory?

The criteria for Amazon WorkSpaces directories are more specific than just supporting SAML 2.0. While SAML 2.0 integration is available for certain directory types, it's not the sole determining factor for WorkSpaces compatibility. Here are the key points regarding WorkSpaces directory criteria:

1. AWS Directory Service options: WorkSpaces can use directories managed through AWS Directory Service, including Simple AD, AD Connector, and AWS Managed Microsoft AD. These are the primary options for most WorkSpaces deployments.

2. Microsoft Entra ID (formerly Azure AD): For Personal WorkSpaces, you can create a directory that uses Microsoft Entra ID as its identity source through IAM Identity Center. However, this option only supports Windows 10 and 11 Bring Your Own License (BYOL) WorkSpaces.

3. Custom directories: You can create a dedicated Custom directory for WorkSpaces Personal using IAM Identity Center and managing user access through an Identity Provider (IdP). This option also supports only Windows 10 or 11 BYOL personal WorkSpaces and uses the DCV protocol.

4. On-premises Active Directory: You can use an existing on-premises Microsoft Active Directory through AD Connector or set up a trust relationship between AWS Managed Microsoft AD and your on-premises domain.

5. SAML 2.0 integration: SAML 2.0 is available for WorkSpaces Personal directories managed through AWS Directory Service (Simple AD, AD Connector, AWS Managed Microsoft AD). However, it's not applicable to directories managed by Amazon WorkSpaces itself, which typically use IAM Identity Center for user authentication.

It's important to note that while AWS Identity Center (formerly AWS SSO) can be used in some scenarios, particularly with Custom directories for Personal WorkSpaces, it's not a direct replacement for the primary directory options supported by WorkSpaces. The criteria for WorkSpaces directories are based on compatibility with the WorkSpaces service architecture and the specific authentication and management features required for different WorkSpaces deployment types.
Sources
Register an existing AWS Directory Service directory with WorkSpaces Personal - Amazon WorkSpaces
Integrate SAML 2.0 with WorkSpaces Personal - Amazon WorkSpaces
Manage directories for WorkSpaces Personal - Amazon WorkSpaces
Create a dedicated Custom directory with WorkSpaces Personal - Amazon WorkSpaces
Amazon WorkSpaces Features | Persistent Desktop Virtualization