The Mission Blueprint - SSO Integration configures SSO in an organization to enable seamless access to multiple applications and services so that you can reduce the burden of employee support requests and allow your IT team to easily maintain access management and security best practices at scale.

Mission Blueprint for SSO Integrations implements SSO access across your AWS accounts through one of three methods:

• AWS SSO with AWS IAM Identity Center: This is the default identity source when enabling IAM Identity Center for the first time. You can use this to manage your users and groups and assign levels of access to AWS accounts and applications directly in the console.
• Active Directory: Use this method if you want to continue managing users in your AWS Managed Microsoft Active Directory or your self-managed AD. Mission can help configure this through AWS Directory Service.
• External identity provider: Choose this option if you prefer to manage users in an external identity provider (IdP) such as Okta, CyberArk, OneLogin, Ping Identity, JumpCloud, or Azure Active Directory.

Let Mission help you achieve your SSO integration needs with this Mission Blueprint.

Key Activities

• Meet with your team to understand your business goals for managing SSO access and permissions to your AWS environment
• Propose best practice technical approaches and work with you to identify the best identity source solution for your needs
• Configure access permissions for your applications, users, and groups to implement a working solution that enables systematic cross-domain identity management (SCIM) provisioning
• Document the set up and recommend best practices so that your team can maintain it in the future
• Conduct knowledge transfer to ensure your team is prepared for maintenance and long-term ownership