Add users - AWS IAM Identity Center (successor to AWS Single Sign-On)

Add users

Users and groups that you create in your IAM Identity Center identity store are available in IAM Identity Center only. Use the following procedure to add users to your IAM Identity Center identity store.

To add a user

  1. Open the IAM Identity Center console.

  2. Choose Users.

  3. Choose Add user and provide the following required information:

    1. Username – This user name will be required to sign in to the AWS access portal and cannot be changed later. It must be between 1 and 100 characters.

    2. Password – Choose from one of the following choices to send the user's password.

      1. Send an email to the user with password setup instructions. – This option automatically sends the user an email addressed from Amazon Web Services. The email invites the user on behalf of your company to access the IAM Identity Center AWS access portal.

        Note

        All emails sent by the IAM Identity Center service will come from either the address no-reply@signin.aws or no-reply@login.awsapps.com. We recommend that you configure your email system so that it accepts emails from these sender email addresses and does not handle them as junk or spam.

      2. Generate a one-time password that you can share with the user. – This option provides you with the AWS access portal URL and password details that you can manually send to the user from your email address.

    3. Email address – The value you provide here must be unique.

    4. Confirm email address

    5. First name – You must enter a name here for automatic provisioning to work. For more information, see Automatic provisioning.

    6. Last name – You must enter a name here for automatic provisioning to work.

    7. Display name

      Note

      (Optional) You can provide additional attributes such as Employee number and Office 365 Immutable ID to help map the user's identity in IAM Identity Center with certain business applications that the user needs to use.

  4. Choose Next.

  5. Select one or more groups that you want the user to be a member of. Then choose Next.

  6. Review your information from Step 1: Specify user details and Step 2: Add user to groups - optional. Choose Edit by either step to make any changes. Once you are satisfied with what you have entered in Step 1 and Step 2, choose Add user.