By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

What happens to rogue domain users when SSO is enabled?

0

My organization has a few users who were using AWS before we officially began managing it. Their accounts are using the same domain as us, but we're unable to see which users these are. Is there a way to see these users? What happens to these users login when we enable SSO?

Topics
Security, Identity, & ComplianceManagement & GovernanceAWS Well-Architected Framework
Tags
Security, Identity, & ComplianceAWS Identity and Access ManagementAWS Directory ServiceAWS Management ConsoleSecurity
Language
English
rePost-User-0269298
asked 2 years ago372 views
2 Answers
0

By rogue domains users you mean they had IAM users (credentials for login in the Console) using the domain before using the SSO? You will able to see this user on IAM console, and delete it.

They will be able to login both ways. One using the SSO and other directly through the console. Because while they have the email as username, it could be just another string. And it will be better for management, security and compliance that anyone logs under the SSO.

profile pictureAWS
Ibrahim Cesar
answered 2 years ago
0

You can find the login events in CloudTrail and use Athena to find these events.

profile pictureAWS
EXPERT
kentrad
answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content