Posted On: Jan 16, 2019
AWS Single Sign-On (AWS SSO) now enables you to configure additional settings that allow you to enable email-based verification for the improved security of your users when they sign in to the user portal. You can enable email-based verification in a user-friendly context-aware mode or a compliance-friendly always-on mode.
In context-aware mode, your users are prompted to enter a verification code sent to their email only when there is a change in their sign-in context such as an unknown location or device. In always-on mode, your users are prompted for the code every time they sign in to the user portal.
This feature is available in all regions where AWS SSO is available. To learn more, see Add a layer of security for AWS SSO user portal sign-in with context-aware email-based verification.