Amazon Redshift releases drivers for supporting single sign-on with AWS IAM Identity Center

Posted on: Aug 1, 2024

Amazon Redshift customers can now connect to their data warehouses via JDBC/ODBC/Python drivers with corporate identity by integrating their identity providers with AWS IAM Identity Center, which enables a seamless single-sign-on experience with other AWS services or Redshift tools that already support trusted identity propagation. With single sign-on capabilities, users can seamlessly access Amazon Redshift and other AWS services without the need to manage multiple sets of credentials.

Customers can now connect to Amazon Redshift data warehouses from their SQL client tools over JDBC, Python, and ODBC drivers using their identity with their preferred identity provider such as Microsoft Entra Id, Okta, Ping, OneLogin, etc. by integrating with AWS IAM Identity Center. To authenticate with AWS IAM Identity Center, customers need to configure the issuer_url, plugin_name, and idc_region fields in the Extended Properties for their driver settings. Amazon Redshift supports a browser plugin for AWS IAM Identity Center, which will prompt a browser window for users to sign in with their user credentials defined in their corporate identity providers. Once the users are authenticated they will have authorized access to data based on the permissions defined in either Redshift roles or AWS Lake Formation.

This feature is available in the AWS regions where both AWS IAM Identity Center and Amazon Redshift are available. For more information, see our documentation and blog.