AWS SSO + Azure AD, no way to access AWS Console?

Question

I am trying to access the AWS Console via AWS SSO with Azure AD as my identity provider. Following this Microsoft tutorial: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/aws-single-sign-on-tutorial, I was able to successfully set up SSO and automatic provisioning. To initiate sign in I use the My App browser extension. I can authenticate but I am brought to the User Portal and I have no applications. What am I missing? How do I access the AWS Console using this method?

Microsoft has another Enterprise Application call AWS Single-Account Access. If I set this up, I can access the Console: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/amazon-web-service-tutorial but I don't think that's what I want. Any help would be much appreciated. Thanks

Accepted Answer

You are missing granting your AWS SSO users/groups access to the accounts. [Assign User Access](https://docs.aws.amazon.com/singlesignon/latest/userguide/useraccess.html)

AWS SSO + Azure AD, no way to access AWS Console?

Conteúdo relevante