Setting up AWS IAM Identity Center for Amazon DataZone

To enable AWS IAM Identity Center, you must sign in to the AWS Management Console by using the credentials of your AWS Organizations management account. You can't enable IAM Identity Center while signed in with credentials from an AWS Organizations member account. For more information, see Creating and managing an organization in the AWS Organizations User Guide.

Open the AWS IAM Identity Center (successor to AWS Single Sign-On) console and use the region selector in the top navigation bar to choose the AWS region in which you want create your Amazon DataZone domain.

Choose Enable.

Choose your identity source.

By default, you get an IAM Identity Center store for quick and easy user management. Optionally, you can connect an external identity provider instead. In this procedure, we use the default IAM Identity Center store.

For more information, see Choose your identity source.

In the IAM Identity Center navigation pane, choose Groups, and choose Create group. Enter the group name and choose Create.

In the IAM Identity Center navigation pane, choose Users.

On the Add user screen, enter the required information and choose Send an email to the user with password setup instructions. The user should get an email about the next setup steps.

Choose Next: Groups, choose the group that you want, and choose Add user. Users should receive an email inviting them to use SSO. In this email, they need to choose Accept invitation and set the password.