Active Directory Federation Services provides access control and single sign on (SSO) across a wide variety of applications including Amazon WorkMail, Amazon WorkSpaces, Amazon WorkDocs, Office 365, cloud based SaaS applications, and applications on the corporate network.

For the user, it provides seamless sign on using the same, familiar account credentials.
For the developer, it provides an easy way to authenticate users whose identities live in the organizational directory so that you can focus your efforts on your application, not authentication or identity.

Eliminate Passwords from the Extranet

Sign in with AWS Multi-Factor Authentication
Password-less Access from Compliant Devices
Sign in with Windows Hello for Business

Secure Access to Applications

Modern Authentication
Configure access control policies without having to know claim rules language
Enable sign on with non-AD LDAP directories

Better Sign-in experience

Customize sign in experience for AD FS applications

Manageability and Operational Enhancements

Streamlined auditing for easier administrative management
Improved interoperability with SAML 2.0 for participation in confederations
Simplified password management for federated users

Amazon EC2 running Microsoft Windows Server is a fast and dependable environment for deploying applications using the Microsoft Web Platform. Amazon EC2 enables you to run compatible Windows-based solutions on AWS' high-performance, reliable, cost-effective, cloud computing platform.