Using AWS SSO with Okta, Active Directory, and AWS SSO Identities

Level: 200

AWS Single Sign-On (SSO) gives AWS administrators a simpler way to configure roles and assign access across multiple AWS accounts. AWS SSO enables customers to connect an identity source to AWS once, and then manage access to AWS centrally in AWS SSO. No additional configuration is required in the individual accounts. AWS SSO is integrated with AWS Organizations, enabling you to select one or more accounts from your organization and grant users access to these accounts. This tech talk dives deep into the differences between creating identities in AWS SSO, bringing in identities from Active Directory, and using identities that are in Okta Universal Directory. It explains how to use the Okta Universal Directory as the identity source, and provision Okta users and groups into AWS SSO. We will also discuss tips on switching from one identity source to another.