Federate access to Amazon SageMaker Unified Studio with AWS IAM Identity Center and Ping Identity

This article provides a technical guide for federating access to Amazon SageMaker Unified Studio using Ping Identity as an external identity provider with AWS IAM Identity Center.

• Enable IAM Identity Center and create a SageMaker Unified Studio domain
• Set up Ping Identity environment, groups, and users for authentication
• Configure SAML integration between Ping Identity and IAM Identity Center
• Enable automatic user and group provisioning via SCIM protocol
• Configure SSO access in SageMaker Unified Studio with assignment options
• Supports fine-grained access control through project profiles and authorization policies
• Users authenticate with corporate credentials via Ping Identity SSO

This solution enables enterprises to manage SageMaker Unified Studio access through existing identity systems, eliminating separate credential management while maintaining security controls.