A company wants to manage access and permissions for its third-party software as a service (SaaS) applications. The company wants to use a portal…

AWS IAM Identity Center (successor to AWS Single Sign-On) is the service designed to centrally manage workforce access to multiple AWS accounts and business applications. It provides a unified user portal where end users can sign in once and access all their assigned AWS accounts and integrated cloud applications, including third-party SaaS applications. This directly addresses the company's need for a single portal to manage access and permissions for both AWS and external applications.

A. Amazon Cognito: This service is for adding user sign-up, sign-in, and access control to customer-facing web and mobile applications, not for managing internal employee access to multiple corporate applications.

C. AWS Identity and Access Management (IAM): IAM is used to manage access to AWS services and resources securely. It does not provide a user portal for single sign-on access to third-party SaaS applications.

D. AWS Directory Service for Microsoft Active Directory: This is a managed directory service. While it can be used as an identity source for IAM Identity Center, it is not the service that provides the SSO portal itself.

---

1. AWS IAM Identity Center (AWS Single Sign-On) User Guide: "AWS IAM Identity Center (successor to AWS Single Sign-On) helps you securely create or connect your workforce identities and manage their access centrally across AWS accounts and applications... Your users get a user portal to access all of their assigned AWS accounts

cloud applications

and custom applications in one place."

Source: AWS Documentation

What is AWS IAM Identity Center?

Section: "IAM Identity Center features".

2. AWS IAM Identity Center (AWS Single Sign-On) User Guide: "With IAM Identity Center

you can manage SSO access and user permissions across all of your AWS accounts in AWS Organizations. You can also manage access to many business cloud applications

such as Salesforce

Box

and Microsoft 365."

Source: AWS Documentation

What is AWS IAM Identity Center?

Section: "Overview".

3. AWS Identity and Access Management (IAM) User Guide: "AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources. With IAM

you can centrally manage permissions that control which AWS resources users can access."

Source: AWS Documentation

What is IAM?.

4. Amazon Cognito Developer Guide: "Amazon Cognito provides authentication

authorization

and user management for your web and mobile apps. Your users can sign in directly with a user name and password

or through a third party such as Facebook

Amazon

Google or Apple."

Source: AWS Documentation

What is Amazon Cognito?.