Hi, everyone, and welcome back.
Now, in the earlier setup videos we were discussing about the basics of the IAM Identity Center and
its associated concepts and considerations.
So today's video is going to be a practical one so that we understand the overall steps required to
configure it.
So let's go ahead and quickly go to the identity center.
So you have the IAM Identity Center, which is a successor to the single sign on.
Now one of the first steps that you will do is you'll have to enable the identity center.
Now at this stage in case if you do not have the organizations configured, it will give you a pop up
to also configure the address organizations.
Now in my case, I already have organizations enabled, and this is the reason why our identity center
has been enabled directly.
Now, along with that, it has also given us the access portal URL.
So this is the URL which the users will use to log in to the overall access portal.
And from here they'll be able to connect to various other accounts that you have.
Now, before we test things out, first, things that we need to do is we have to create a new user.
So let's go ahead and quickly create a new user.
Let's add a user within the user.
I'll say.
Mr. Bob, along with that, as part of the password, let me just select generate a one time password
that we can share in the email address.
Just for simplicity, lets us add my email that we use.
Let's add the first name and the last name as well.
Once, then you can click on next.
At this stage we do not have a group, so we'll just leave it blank.
We'll go ahead and we'll add a user.
Great.
So at this stage, our user, Mr. Bob, is created and this is the details associated with the user.
Again, in the dark mode that Atlas has introduced, this is not really looking pretty well, so I assume
that this will be fixed at a later stage.
So let's go ahead and copy this and within my local workstation in a notepad, I'll add the details
here.
So this is the access portal URL, this is the username and this is the password.
Now, at this stage, this user does not really have any permission.
So what we need to do is we have to create a certain set of permission sets.
However, before we do that, let's go ahead and quickly try it out to see what this user would see.
So from an incognito mode, let me copy this access portal URL.
Let me add it over here.
Within the username, I'll say, Mr. Bob, let's do our next.
And for the password.
Let's copy this password here.
And let me add over here.
As soon as you authenticate with the default password, it will ask you to supply a new password.
Let's quickly do that.
Once.
Then you can set a new password.
And we are currently logged in.
Now at this stage, since the Mr. Bob user does not have any permission, it states you do not have
any application that is configured here.
Great.
So now let's go ahead and start working with the permission sets.
So I'll go to the permission sets here.
Let's create a permission set.
We'll keep it very simple.
We'll use the predefined policy.
You have administrator access and various other access.
You also have a read only access.
I just see administrator access.
That's for simplicity.
Let's do our next We'll just name the permissions set is administrator access.
In fact, let's just call it a administrator access permission set.
All right.
Let's do it next and we'll create it.
Now, at this stage, this permission set is not associated with any account.
The next step is to associate this with the accounts that you have as part of your organization.
So if I quickly open this up in the accounts here, you see there are zero accounts.
So you can go ahead and add this as part of the account that you would like to integrate as part of
your single sign on experience.
So from the accounts on the left, you can select the account and within here you can add the permission
sets.
Let's assign users.
So since we have one user of Mr. Bob, I'll select it.
And in the permission set, we'll select our permission set and I'll click on submit.
So once this is done, if I quickly refresh, you see Mr. Bob is able to see one eight of us account.
And if you want to open this up, all Mr. Bob has to do is open up the management console.
And Mr. Bob is logged in.
Great.
So I hope with this at a high level overview, you understood the basics about the IAM identity Center
implementation.
Again, one important part to note is that in case if you have your own identity source, you can also
integrate that.
So if you quickly go to the settings, you have the option of choosing your own identity source.
So if you can change the identity source, you have the identity center directory, which we are using
the ADD as well as the external IDP.
So that's the high level overview and with this will conclude today's video.