Getting started with IAM Identity Center
The following outlines how you can get started with IAM Identity Center.
Enable IAM Identity Center
When youenable IAM Identity Center, you choose between two types of IAM Identity Center instances. These types are:organization instances (recommended) andaccount instances. To learn more about the different capabilities of these instance types, seeorganization and account instances of IAM Identity Center.
After IAM Identity Center is enabled, you can sign in and open theIAM Identity Center console by doing either of the following:
Organization instance - Sign in to AWS using credentials with administrative permissions in the management account.
Account instance - Sign in to AWS using credentials with administrative permissions in the AWS account where IAM Identity Center is enabled.
Connect your identity source to IAM Identity Center
In IAM Identity Center console, confirm the identity source that you want to use. See the following for identity sources:
External identity provider - If you have an existing identity provider to manage your workforce users, you can connect it to IAM Identity Center. For more information about how to configure commonly used identity providers to work with IAM Identity Center, seeIAM Identity Center identity source tutorials.
Active Directory - If you are using Active Directory to manage your workforce users, you can connect it to IAM Identity Center. For more information, seeUsing Active Directory as an identity source.
IAM Identity Center - Alternatively, you cancreate and manage users and groups directly in IAM Identity Center.
Set up user access to AWS accounts (organization instance only)
If you’re using an organization instance of IAM Identity Center, you canassign user or group access to AWS accounts, usingpermission sets to grant your users access to AWS accounts and resources.
Set up user access to applications
With IAM Identity Center, you can grant users access to two types of applications:
You can use IAM Identity Center with AWS managed applications like Amazon Q Business, AWS CLI, and Amazon Redshift. For more information, seeAWS managed applications andIntegrating AWS CLI with IAM Identity Center.
You can integrate either of the following types of customer managed applications with IAM Identity Center:
After configuring your application, you canassign your users access to the application.
Provide your users with sign-in instructions for the AWS access portal
The AWS access portal is a web portal that provides your users with seamless access to all their assigned applications, AWS accounts, or both. New users in IAM Identity Center must activate their user credentials before they can sign in to the AWS access portal.
For information about how to sign in to the AWS access portal, seeSign in to the AWS access portal in theAWS Sign-In User Guide. To learn about the sign-in process for the AWS access portal, seeSigning in to the AWS access portal.
