
Amazon QuickSight Enterprise edition can integrate with Microsoft Active Directory using SAML-based identity federation through AD FS to enable federated single sign-on access to dashboards using existing corporate identities.


<div><p>This article explains how to configure Active Directory Federation Services (ADFS) identity federation with Amazon QuickSight Enterprise edition for federated single sign-on access.</p><ul><li>Create SAML identity provider in IAM with ADFS metadata document</li><li>Create IAM policies for QuickSight admin, author, and reader roles</li><li>Create IAM roles with ADFS naming convention and trust relationships</li><li>Configure AD security groups matching IAM role names with AWS account ID</li><li>Create relying party trust in ADFS pointing to AWS SAML metadata</li><li>Configure ADFS claim rules for NameId, RoleSessionName, AD groups, and roles</li><li>Enable email syncing in QuickSight to use corporate email addresses</li><li>Generate relay state URL for QuickStart dashboard access</li></ul><p>This solution enables users to access QuickSight dashboards using existing Active Directory credentials with one-click SSO, eliminating separate IAM user management.</p></div>


Related articles