3 ms·
Correct, but for AWS, you can use SSO and delegate the MFA to your SSO provider.
by ecnahc515 5y ago
Correct, but for AWS, you can use SSO and delegate the MFA to your SSO provider.
- Spivak 5y agoIn AWS you must delegate your MFA to the SSO provider. Having an SSO provider but AWS managed MFA isn’t even possible because SSO users map to roles instead of IAM users.
- arianvanp 5y agoIt actually is. AWS SSO itself (so not on the IAM users level) supports user management too without an external SSO provider and actually _does_ allow multiple MFA devices unlike IAM. It's a giant hack but works!