IAM is used for managing a Single Account

IAM Identity Center is used for Managing Multiple Accounts Login Screen, Authentication, and Authorization. AWS IAM Identity center provides a single Sign on access for all our AWS Accounts and Cloud Applications.

We have 3 Login Screens in AWS

• IAM Login Screen

  

• Identity Center Login Screen

  

• Root User Login Screen

  

How to Setup an AWS Identity Center

Nb: AWS Identity Center is In the Management Account (Root Account)

Search (IAM Identity Center in the search dialogue box and Select it)

Steps:

1. Enable Identity Center in AWS by Clicking Enable

2. Choose Identity Center

   • Scroll down to IAM Identity center Setup

   • Select confirm Identity Source

     

   • Select Enable Identity Enhance Session

   • Change AWS Access Portal URL

     Nb: This is the link that wil be used to log into AWS Identity Center

     By changing Identity Store Id

     • Click on Actions

     • Then Customize AWS Access Portal URL

     • Enter a Subdomain name…. eg: SmartDigital

     • Confirm Subdomain and Save

       

3. Create Admin Permission Set

   Select Permissin Set under Multi-Accont Permissions in IAM Identity Center Dashboard

   

   • Select Create Permission Set
   • Select Admin
   • Click Next
   • Specify Permission Set details

   1. Name: Administrator Access

   2. Description: For Admin Users (8am - 4pm)

   3. Session Duration: 8 Hours

      

   4. Select Next

   5. Select Create

Repeat Step a to e for other permissions eg: (Power Users, System Administrators e.t.c)

How To Create Groups And Assign Permissions in IAM Identity Center

Go to Groups in IAM Identity Center Dashboard