A guide to identity management in Research and Engineering Studio on AWS

This article provides a guide on identity management in Research and Engineering Studio (RES) on AWS, which allows secure access to AWS cloud resources for scientific and engineering communities using their own enterprise identity services.

Specifically, the article covers:

• The two requirements for identity in RES: a SAML 2.0 compliant identity provider (IdP) for single sign-on, and an authoritative identity source like Microsoft Active Directory
• Options for the identity provider (IdP): using an existing IdP like AWS IAM Identity Center or a third-party provider, or creating a dedicated IdP
• Options for the identity source: using an AWS Managed Active Directory, connecting to an on-premises Active Directory over a VPN, or integrating with Microsoft Entra ID (formerly Azure AD) using Domain Services
• Conclusion summarizing the choices for the IdP and identity source, and resources for further guidance