Assign AWS management groups to the Okta AWS app

After mapping Amazon Web Services (AWS) role groups to entitlements, you need to assign all AWS management groups to the AWS app in Okta. If you have provisioning enabled and you can't assign a management group, disable provisioning and then assign all AWS management groups to the AWS app in Okta.

1. In the Admin Console, go to ApplicationsApplications.

2. Enter AWS in the Search field.
3. Click AWS Account Federation, then select the Assignments tab.

4. Click AssignAssign to Groups.

5. For each AWS management group, click Assign.
6. Click Done.

   Users are automatically assigned to AWS and can access the entitlements you defined.

7. Verify that users can access AWS from their Okta Dashboard and sign-on works as expected.