AWS IAM Identity Center

aws Identity provideraws-iam-identity-center

Central workforce identity and single sign-on for AWS accounts and AWS managed applications.

Provider: aws
Kind: Identity provider
Category: Security
Official docs: https://docs.aws.amazon.com/singlesignon/latest/userguide/enable-mfa.html
Also known as: AWS SSO

Properties · 5 set by this component

property	type	values	required	kind default	this component
authorizationModel	enum	none \| rbac \| abac \| rebac	no	rbac	▸ rbac
centralised · advanced	boolean	—	no	true	▸ true
identitySource · component property	enum	identity-center-directory \| active-directory \| external-idp	no	identity-center-directory	inherited
instanceType · component property	enum	organization \| account	no	organization	inherited
managed	boolean	—	no	true	▸ true
mfa	boolean	—	no	false	▸ true
multiRegionReplication · component property	boolean	—	no	false	inherited
protocol	enum	oidc \| saml \| oauth2 \| iam \| custom	no	oidc	▸ saml
trustedIdentityPropagation · component property	boolean	—	no	false	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "iam-identity-center", component: "aws-iam-identity-center" }

Other Identity provider products · 47

Resource Access Managementalibaba-ramalibabacloudidentity-provider Amazon Cognitoaws-cognitoawsidentity-provider Amazon Cognito identity poolaws-cognito-identity-poolawsidentity-provider AWS Directory Serviceaws-directory-serviceawsidentity-provider AWS IAMaws-iamawsidentity-provider AWS IAM Roles Anywhereaws-iam-roles-anywhereawsidentity-provider AWS Directory Service Simple ADaws-simple-adawsidentity-provider Microsoft Azure Attestationazure-attestationazureidentity-provider Microsoft Entra Domain Servicesazure-entra-domain-servicesazureidentity-provider Microsoft Entra External IDazure-entra-external-idazureidentity-provider Microsoft Entra IDazure-entra-idazureidentity-provider Microsoft Entra Verified IDazure-entra-verified-idazureidentity-provider Azure IoT Hub Device Provisioning Serviceazure-iot-dpsazureidentity-provider Managed identities for Azure resourcesazure-managed-identityazureidentity-provider Cloudflare One identity providercloudflare-one-identity-providercloudflareidentity-provider Active Directory Domain Servicesactive-directoryidentity-provider Athenzathenzidentity-provider Auth0auth0identity-provider Autheliaautheliaidentity-provider authentikauthentikidentity-provider Clerkclerkidentity-provider Dexdexidentity-provider FreeIPAfreeipaidentity-provider Generic identity provideridentity-provideridentity-provider Keycloakkeycloakidentity-provider OAuth2 Proxyoauth2-proxyidentity-provider Oktaoktaidentity-provider OpenFGAopenfgaidentity-provider OpenLDAPopenldapidentity-provider Oryoryidentity-provider Ping Identity Platformping-identityidentity-provider SpiceDBspicedbidentity-provider SPIREspireidentity-provider Stytchstytchidentity-provider WorkOSworkosidentity-provider Zitadelzitadelidentity-provider Cloud Identitygoogle-cloud-identitygcpidentity-provider Firebase Authenticationgoogle-firebase-authgcpidentity-provider Google Identity Platformgoogle-identity-platformgcpidentity-provider Managed Service for Microsoft Active Directorygoogle-managed-microsoft-adgcpidentity-provider

and 7 more → Identity provider page

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# AWS IAM Identity Center: central workforce federation into AWS accounts and AWS managed
3# applications. "What is IAM Identity Center?" and "MFA for Identity Center directory users":
4# it ships preconfigured with MFA turned on for all users; organization instance is the default shape.
5schemaVersion: "1"
6type: "component"
7id: "aws-iam-identity-center"
8kind: "identity-provider"
9provider: "aws"
10docs: "https://docs.aws.amazon.com/singlesignon/latest/userguide/enable-mfa.html"
11aliases: ["AWS SSO"]
12defaults:
13  protocol: "saml"
14  authorizationModel: "rbac"
15  centralised: true
16  mfa: true
17  managed: true
18properties:
19  identitySource:
20    type: "enum"
21    values: ["identity-center-directory", "active-directory", "external-idp"]
22    default: "identity-center-directory"
23  instanceType:
24    type: "enum"
25    values: ["organization", "account"]
26    default: "organization"
27  trustedIdentityPropagation:
28    type: "boolean"
29    default: false
30  multiRegionReplication:
31    type: "boolean"
32    default: false

The same page as markdown, for an agent: /catalogue/components/aws-iam-identity-center.md