Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

Unable to Sign in to AWS Management Console with New User

0

Hi,

I created a new user for myself, for daily tasks on AWS (and to post here—I’m having to do this here now using root access, unfortunately), but I cannot log in to the Management Console—I keep getting “Invalid information” errors.

I created the user through the IAM Identity Center. I created permission sets for Administrator Access and PowerUser Access and assigned them to “administration” and “development” groups, respectively. I assigned this user to both groups. It should have Administrator Access. I also used “Multi-account permissions” to assign this user to the AWS account, which is how I was able to do the aforementioned assignment to groups/permissions. I set up a new password as the user and verified its email.

When I try to sign into AWS with this user, I paste in my AWS account ID from copying it in the console as the root user—it is correct. I enter both the username and password correctly—I have tried to sign in numerous times—the information is correct. Yet every time I try, I get “invalid account information” errors.

What am I missing here?

Topics
Management & GovernanceSecurity, Identity, & Compliance
Tags
AWS IAM Identity CenterAWS Management ConsoleAWS Account Management
Language
English

asked 2 years ago2.3K views

1 Answer
2
Accepted Answer

It appears that you may be attempting to sign in to the AWS Management Console using the wrong sign-in page for your newly created IAM Identity Center user. When you create a user through IAM Identity Center (formerly AWS Single Sign-On), the sign-in process is different from that of a standard IAM user.

Instead of using the regular IAM user sign-in page where you enter the account ID, username, and password, IAM Identity Center users need to use a specific access portal URL to sign in.

To sign in with your new user:

  1. You should have received an email invitation when the user was created in IAM Identity Center. This email contains a link to your organization's access portal.

  2. If you don't have the email, you can ask your AWS account administrator for the access portal URL. It typically looks like: https://d-xxxxxxxxxx.awsapps.com/start

  3. Once you have the correct URL, go to this access portal.

  4. Sign in with the email address and password you set up for this user.

  5. After successful authentication, you should see the AWS accounts and applications you have access to.

  6. Select the appropriate AWS account to access the AWS Management Console.

If you're still unable to sign in after following these steps, double-check that your user is properly set up in IAM Identity Center and that all permissions are correctly assigned. Also, ensure that you've completed any required email verification steps.

Remember, IAM Identity Center users cannot use the standard IAM user sign-in page with the account ID. They must always go through the access portal specific to your organization.
Sources
Troubleshooting AWS account sign-in issues - AWS Sign-In
Troubleshooting issues with AWS account creation - AWS Account Management

answered 2 years ago

EXPERT

reviewed 2 years ago

EXPERT

reviewed 2 years ago

  • Gary Mclean EXPERT
    2 years ago

    You have to use the URL provided in Identity centre to login with. You do not use the same logon screen as you would do logging in as an IAM user

  • Avana Vana
    2 years ago

    Thanks, but what started this was that I wanted to actually ask a question here on re:Post as an IAM user instead of doing so as the root user (which I am doing now—but I wish to do as little as possible with the root user and access it as seldom as possible).

    However, when I try to log in here, that is the login form that is always presented to me. Is there some other way I can log in to re:Post? Will that portal URL provide me with a way to log in here too? Because once logged into AWS it always redirects me to re:Post and asks me to log in again with that other form (with the AWS account ID).

  • Avana Vana
    2 years ago

    Nevermind, I was able to access re:Post after signing in through the portal link.

    It did still redirect me out to re:Post and ask me to sign in again with an AWS Management login, but it seemed to recognize that I was already logged into the console through the portal, and I am now commenting on this post as my new AdministratorAccess user. So, success!

    I will mark the above answer as “answered” with the account I used to ask the question originally after this. Thanks again.

  • Avana Vana
    2 years ago

    But I will say that this process was rather convoluted and not at all straightforward. Even verifying my re:Post account as the new user was problematic, as it kept making me sign in to re:Post using that other form. In order to get it to work I had to copy the email verification url from my email and paste it into a tab that already had an authenticated session in re:Post, as the new user. Just clicking the link and opening a new tab as it does naturally only lets me log in with that other form.

  • Avana Vana
    2 years ago

    Although, I am just realizing now that I did this while using incognito mode on my device, so that is likely the reason I couldn’t get to the right form. Oops!

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content