AWS Single Sign-On
By AWS Single Sign-On
AWS SSO also supports SAML 2.0 federation to provide single sign-on access to on-premises and cloud-based applications. AWS SSO allows you to manage access to various AWS accounts and business applications from a single location. You can easily manage access and user rights to all of your AWS Organizations accounts using AWS SSO. SSO automatically configures and maintains all necessary rights for your accounts, with no further configuration required in the individual accounts. User rights can be assigned based on typical job functions, and these permissions can be customised to match your individual security needs. Many commercial applications, such as Salesforce, Box, and Microsoft 365, have built-in connections with AWS SSO. You can create and maintain user IDs in AWS SSO's identity store, or connect to an existing identity source such as Microsoft Active Directory, Okta Universal Directory, or Azure Active Directory, using AWS SSO (Azure AD). AWS SSO allows you