AWS IAM Identity Center is the Amazon Web Services offering for giving workforce users access to AWS accounts and AWS managed applications. An organisation connects an existing identity source, such as Microsoft Entra ID, Okta, Google Workspace or Active Directory, or manages users directly in the service itself. IAM Identity Center then handles single sign-on, assignment of permissions through permission sets, and a web portal for users. The service was called AWS Single Sign-On until 26 July 2022 and is delivered as a managed cloud service through the AWS console.
Amazon Web Services is part of US-based Amazon and subject to US law, including the CLOUD Act. The service is available in multiple AWS Regions, including Frankfurt, Ireland, Paris, Stockholm, Milan, Spain and Zurich, and the instance can be replicated to additional Regions. According to AWS, the customer decides in which geographic region data is stored. For GDPR purposes AWS points to standard contractual clauses in its service terms. An EU Region therefore limits the storage location, but not US jurisdiction over the provider.