Part 1. AWS-SSO Integrated with Azure AD

• 22nd August 2020 24th August 2020
• by [Kabir Vaderaa](/content/author/kb/ "Kabir Vaderaa"/index.html)

In this article I will show you how to create Aws SSO and integrate it with your Azure AD for Single Sign On (SSO).

Many organisations have multiple public cloud providers. The challenge with cloud for many organisations is having a good mechanism on user access management (UAM). Many organisations have also integrated their LDAP into Azure AD, and while there are better Identity providers (IdP), Microsoft has made good improvements in this space.

Aws SSO is Amazon's alternative to Azure AD and has many connectors to third parties; however, in this scenario we are going to put Azure AD as the primary and use AWS SSO to integrate with an AWS organisation.

Before starting you should have set up an AWS organisation. If you don’t know how, here is a guide on how to set it up.

AWS Config

Login to your master AWS Organisation account and go to

When you login you will get a screen like below:

Enable SSO

Click the Enable AWS SSO. In the background, SSO is provisioned in each of the organisation’s accounts. You can see this by looking at the subscriptions IAM.

Once provisioned into SSO, click on choose Identity Source.

Select External Identity Provider and download the metadata file.

Next go to Azure AD Config Part 2.