Cloud Renames Contribute
RenamedCompute, Security & InfraAWS

AWS Single Sign-On AWS IAM Identity Center

Cloud workforce identity service for centrally managing single sign-on access to multiple AWS accounts and business applications.

Open in interactive timeline ↗All AWS renamesHome

Naming timeline

  1. AWS Single Sign-On (AWS SSO)

    · Initial Launch (AWS re:Invent 2017)

    Launched as a cloud single sign-on service to centrally manage workforce access to multiple AWS Organizations accounts and SAML 2.0 business applications.

  2. AWS IAM Identity CenterCurrent name

    · AWS re:Inforce 2022 Rebrand

    Rebranded to AWS IAM Identity Center while preserving all sso, sso-admin, sso-oidc, and identitystore API, CLI, IAM, CloudFormation, and Terraform identifiers.

What is AWS Single Sign-On called now?

AWS Single Sign-On is now called AWS IAM Identity Center, with the latest change on 26 July 2022 (AWS re:Inforce 2022 Rebrand). Cloud workforce identity service for centrally managing single sign-on access to multiple AWS accounts and business applications. Only the customer-facing name changed; the underlying technical identifiers remain backward compatible.

Also known as

  • AWS SSO
  • IAM Identity Center
  • AWS IAM Identity Center (successor to AWS Single Sign-On)

Technical identifiers

Technical identifiers unchanged. Only the customer-facing product name changed; the APIs, CLI commands, IAM roles and Terraform resources below keep their legacy identifiers for backward compatibility.

AWS Service APIs / SDKssso-admin sso sso-oidc identitystore
AWS CLI Commandsaws sso aws sso-admin aws sso-oidc aws identitystore aws configure sso
IAM Actions & Policiessso:* identitystore:* sso-directory:*
Terraform Resources (aws_*)aws_ssoadmin_permission_set aws_ssoadmin_account_assignment aws_ssoadmin_managed_policy_attachment aws_identitystore_user aws_identitystore_group

Customer-facing console and documentation rebrand only; the sso, sso-admin, sso-oidc, and identitystore API/CLI namespaces, sso:* IAM actions, AWS::SSO::* CloudFormation types, and aws_ssoadmin_* Terraform resources remain active.

Notes & disambiguation

  • On July 26, 2022 (AWS re:Inforce 2022), AWS rebranded AWS Single Sign-On (AWS SSO) to AWS IAM Identity Center to clarify its role as the central workforce identity and access management service across AWS accounts and AWS-managed applications.
  • All underlying programmatic primitives remain on the legacy sso and identitystore namespaces for backward compatibility, including AWS CLI subcommands (aws sso, aws sso-admin, aws sso-oidc, aws identitystore, aws configure sso), IAM action prefixes (sso:*, identitystore:*), CloudFormation resources (AWS::SSO::*), and Terraform resources (aws_ssoadmin_*, aws_identitystore_*).
  • Official documentation continues to use the legacy docs.aws.amazon.com/singlesignon/ URL path, and AWS managed policies retain the AWSSSO* prefix (e.g., AWSSSOMasterAccountAdministrator, AWSSSOReadOnly) alongside the AWSServiceRoleForSSO service-linked role.

Sources & official documentation

Catalog last updated . Spotted an error? Suggest an edit