Identity providers and federation

IDPs

• Are systems or services that manage user identities, groups, and other objects. They’re used to authenticate users and grant them access to resources

IDP Organizational structure

IDPs often organize users and groups in an inverted tree structure called OUs. This structure helps in efficiently managing and categorizing identities within an organization

IDP examples

Commonly used with Microsoft AD and LDAP

SAML Federation

• Used for federating identities and permission

• SAML can be performed at the AWS account scope

• External identity providers configure SAML to allow organizations to manage user access across different domains, enhancing security and simplifying user experience.