AWS Single Sign-On (SSO)

wikipedia:AWS Single Sign-On (Feb 2017) allows to manage SSO access and user permissions to all of your accounts in AWS Organizations centrally. Service is free of charge.

• Homepage: https://aws.amazon.com/single-sign-on/
• AWS CLI: aws sso

When you add SSO access to an AWS account, AWS SSO creates an IAM identity provider in each AWS account.

Errors

• The SSO session associated with this profile has expired or is otherwise invalid. To refresh this SSO session run aws sso login with the corresponding profile.

Related terms

• AWS Cognito
• AWS Organizations
• AWS IAM Identity Center
• AWS Control Tower
• How to use G Suite as an external identity provider for AWS SSO
• 02/2022 HIPAA eligible
• EKS single sign-on using AWS SSO
• AWS STS
• Protect your business with Context-Aware Access (CAA)
• AWS SSO Start URL

See also

• AWS SSO: aws sso, aws sso login, aws sso list-accounts, aws-sso-util, aws sso-admin
• AWS SSO, aws sso, AWS access portal, aws_ssoadmin_permission_set, arn:aws:sso
• Single sign-on: Okta, Red Hat Single Sign-On, Keycloak, OIDC, SAML, ADFS, Access Management Magic Quadrant, Oracle Access Manager, AWS SSO, Azure Active Directory, Federated authentication, Google Workspace: set up SSO via SAML for Amazon Web Services, Login with, Microsoft account, Shibboleth, ORCID, Ping Identity, PingFederate

https://aws.amazon.com/about-aws/whats-new/2017/12/announcing-aws-single-sign-on--sso/

https://aws.amazon.com/about-aws/whats-new/2022/04/aws-single-sign-on-hipaa-eligible/