Published on

Set Up AWS IAM Identity Center

Authors
  • avatar
    Name
    Gene Zhang
    Twitter

Why use IAM Identity Center?

  1. Provide SSO with access to multiple accounts.
  2. Using AWS Organizations. (Must)

User permissions not found

You might find there is no option to manage user permissions in IAM Identity Center.

dashboard

To solve it you must:

  1. delete your IAM Identity Center (IAM Identity Center > Settings > Management).
  2. create an organization (AWS Organizations service).
  3. re-enable the IAM Identity Center, and the Multi-account permissions will appear:
account-section

Create an Organization

There is no additional fee to create an Organization.

  1. Enable these two services:
services1
services2
  1. Create accounts (optional):
  • IAM
  • Network
  • Dev

Enable IAM Identity Center

  1. Create users and groups.
  2. Grant multi-account permissions.
  3. Make IAM account the delegated administrator.