IAM Identity Center (successor to AWS Single Sign-On)

Hi, some starting material for AWS IIC

• https://www.youtube.com/watch?v=AnbBztAmP1w
• https://frontegg.com/guides/aws-sso
• https://aosolorzano.medium.com/implementing-a-multi-account-environment-with-aws-organizations-and-the-iam-identity-center-d1cdb40bdf4d
• https://aws.amazon.com/blogs/security/how-to-enable-secure-seamless-single-sign-on-to-amazon-ec2-windows-instances-with-aws-sso/
• https://aws.amazon.com/blogs/security/how-to-automate-aws-account-creation-with-sso-user-assignment/
• https://aws.amazon.com/blogs/security/build-a-strong-identity-foundation-that-uses-your-existing-on-premises-active-directory/

Best,

Didier

As noted in the prerequisites, AWS Organizations must manage accounts to use AWS IAM Identity Center.
https://docs.aws.amazon.com/singlesignon/latest/userguide/get-started-prereqs-considerations.html

If you are new to AWS Organizations, you don't necessarily need to create a new management account. However, from an operational standpoint, creating a dedicated new account is best practice.