AWS IAM Identity Center
An enterprise identity management and single sign-on service provided by Amazon AWS, formerly known as AWS SSO. It integrates with major enterprise identity providers and synchronizes users and group information via SAML 2.0 or SCIM protocols, enabling centralized identity governance across AWS accounts and applications.
Timeline (last 90 days)
The architecture uses AWS IAM Identity Center as a unified authentication entry point, with centralized identity management establishing permission boundaries.
AWS IAM Identity Center was formerly known as AWS Single Sign-On.
The security core of this solution is JWT-based inbound authentication, accomplished through the collaboration of three components: AWS IAM Identity Center, Amazon Cognito, and JWT token validation.
IAM Identity Center, formerly known as AWS SSO, supports integration with external identity providers such as Microsoft Active Directory, Okta, and Azure AD, synchronizing user and group information via SAML 2.0 or SCIM protocols.
In this solution, IAM Identity Center serves as the upstream identity source, passing authentication results to Cognito, which then issues JWTs based on those results.
Both IAM Identity Center and Cognito are native AWS services, so teams that have already deployed Claude within the AWS ecosystem can adopt this solution without introducing third-party identity systems.
All Facts (6)
The architecture uses AWS IAM Identity Center as a unified authentication entry point, with centralized identity management establishing permission boundaries.
50%UnverifiedAWS IAM Identity Center was formerly known as AWS Single Sign-On.
50%UnverifiedThe security core of this solution is JWT-based inbound authentication, accomplished through the collaboration of three components: AWS IAM Identity Center, Amazon Cognito, and JWT token validation.
50%UnverifiedIAM Identity Center, formerly known as AWS SSO, supports integration with external identity providers such as Microsoft Active Directory, Okta, and Azure AD, synchronizing user and group information via SAML 2.0 or SCIM protocols.
50%UnverifiedIn this solution, IAM Identity Center serves as the upstream identity source, passing authentication results to Cognito, which then issues JWTs based on those results.
50%UnverifiedBoth IAM Identity Center and Cognito are native AWS services, so teams that have already deployed Claude within the AWS ecosystem can adopt this solution without introducing third-party identity systems.
50%