How to enable SSO in AWS Identity Centre in Child account

Question

we have customers which are a member of our Master Payer account, but they want to implement SSO to manage their particular AWS Account.

Being a member of AWS Organization manage by us  , the customer does not have the permission to implement SSO at their level. So what will be the possible solution for this .

And also I found that there is a concept of Organization and account instances of IAM Identity Center by which the member account can manage user and might be SSO for Particular AWS Account.

https://docs.aws.amazon.com/singlesignon/latest/userguide/identity-center-instances.html?icmpid=docs_sso_console

MikeLim · Answer

Since IAM Identity Center is not an option, your customer can implement SAML 2.0 federation to AWS Management Console in their account.

If customer wants to use Entra ID as their Identity Provider (IdP), they can configure SSO Integration with AWS Single-Account Access

If customer wants to use Entra ID as their Identity Provider (IdP), they can configure [SSO Integration with AWS Single-Account Access](https://learn.microsoft.com/en-us/entra/identity/saas-apps/amazon-web-service-tutorial)

Gary Mclean · Answer

2 options spring to mind

1. Enable Identity centre at the account level and connect to the customers IDP
2. Configure IAM SSO

How to enable SSO in AWS Identity Centre in Child account

Add your answer

Relevant content