Is it possible to select a subset of ad users to connect to aws identity center? Also, this same subset of ad users will require MFA, will the pricing be different like in terms of plan per users?

Hello @Anonymous , yes you can limit/control what Azure AD users get to log into AWS Identity Center . MFA is free to user under the per user model and Security Defaults but requires paid licensing under Conditional Access . Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.

Azure AD wtih AWS Identity Center - Specific group of AD users to provision + pricing plan

Accepted answer

Alfredo Revilla - Senior Freelance SWE, SWA, IAM 27,016 Reputation points

2023-05-11T05:27:26.09+00:00

Hello @Anonymous , yes you can limit/control what Azure AD users get to log into AWS Identity Center . MFA is free to user under the per user model and Security Defaults but requires paid licensing under Conditional Access.

Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.
Please sign in to rate this answer.

1 person found this answer helpful.
Vincent Chu Wai Chow 45 Reputation points

2023-05-11T05:42:06.38+00:00

the pricing will still be same? or do we need to upgrade the tier per user for the ones being assigned to be required to use MFA for that subset of users to Identity Center?

Because i read that MFA is either enabled for all or disabled for all for the basic free tier. Im looking for MFA tier level which requires MFA for only users assigned to login in via Identity Center to aws console and not the whole organisation's users

Alfredo Revilla - Senior Freelance SWE, SWA, IAM 27,016 Reputation points

2023-05-11T17:13:39.6333333+00:00

In that case per user MFA or Conditional Access is what you need. The former is free, the latter costs.

Vincent Chu Wai Chow 45 Reputation points

2023-05-12T04:08:52.3333333+00:00

i see, thanks a lot @Alfredo Revilla - Senior Freelance SWE, SWA, IAM
Sign in to comment

Azure AD wtih AWS Identity Center - Specific group of AD users to provision + pricing plan

0 additional answers