Terms to Know when using Amazon WorkLink
To help you get started with Amazon WorkLink, you should get familiar with the following concepts.
- Fleet
-
A fleet consists of resources and the configuration necessary to make your internal websites available to your authorized users who download and set up the Amazon WorkLink app.
- Identity Provider (IdP)
-
An identity provider verifies your users’ credentials. It then issues authentication assertions to provide access to a service provider. You can configure your existing IdP to work with Amazon WorkLink.
- Service Provider (SP)
-
A service provider accepts authentication assertions and provides a service to the user. Amazon WorkLink acts as a service provider to users who have been authenticated by their IdP.
- SAML 2.0
-
A standard for exchanging authentication and authorization data between an IdP and a service provider.
- Domains
-
A list of company websites that your users can access from their mobile devices with Amazon WorkLink.
- Virtual Private Cloud (VPC)
-
You can use an existing or new VPC, corresponding subnets, and security groups to link your content with Amazon WorkLink. For more information, see Managing your Company Network.
- Company code
-
The identifier users input to sign into the Amazon WorkLink app. Amazon WorkLink uses the company code to fetch the company-specific configuration details.
- Device policy
-
A set of requirements an employee device must meet before that employee can access internal content with Amazon WorkLink.
