Successor to AWS Single Sign-On. A central management for federated access by AWS which could be used to: • Attach multiple AWS accounts and business applications • Identities can be in AWS SSO • Works with many IdPs (e.g. Active Directory) • Permissions assigned based on group membership in IdP • Supports user/group provisioning via SCIM; see Azure AD SSO Patterns for AAD integration
