Federated Login SSO W Cyber.Local - Kahuna915/Capstone-Cloud-Integration GitHub Wiki

• First under Security, Identity and Compliance section found under Services, select IAM Identity Center:

• Make sure to enable it

• Secondly choose the identity source...

  • From AWS these are the three identity sources
    • Identity Center directory – When you enable IAM Identity Center for the first time, it is automatically configured with an Identity Center directory as your default identity source. This is where you create your users and groups, and assign their level of access to your AWS accounts and applications.
    • Active Directory – Choose this option if you want to continue managing users in either your AWS Managed Microsoft AD directory using AWS Directory Service or your self-managed directory in Active Directory (AD).
    • External identity provider – Choose this option if you want to manage users in an external identity provider (IdP) such as Okta or Azure Active Directory.

• Thirdly create an administrative permission set:

  • In the IAM identity center go to permission sets:

- You can create a permission set or choose a default one:

• Fourthly setup an AWS account access for an admin user:
  • Choose AWS accounts
  • Assign users or groups
  • Then its basically the same as doing active directory
• Fifthly sign in to setup account
  • Copy the AWS access portal link
  • sign in using the active directory creds
  • Choose the name of your account to display perms and then select management console link
  • to sign in as admin role it would be AdministratorAccess/username
  • If you are redirected you've done it correctly! Sign out of root account now!