# Document history The following table describes important additions to the AWS IAM Identity Center documentation. We also update the documentation frequently to address the feedback that you send us. + **Latest major documentation update: **October 21, 2025 | Change | Description | Date | | --- |--- |--- | | [Multi-Region support](https://docs.aws.amazon.com/singlesignon/latest/userguide/multi-region-iam-identity-center.html) | Added multi-Region support, including replication to additional Regions, AWS account access and use of AWS managed applications in additional Regions. | February 2, 2026 | | [Updated AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html) | Updated the `AWSIdentityCenterExternalManagementPolicy` AWS managed policy to change the ARN for provisioning tenant. | December 5, 2025 | | [New AWS managed policy topic](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html) | Added details for the `AWSIdentityCenterExternalManagementPolicy` AWS managed policy. | November 21, 2025 | | [Auto-provisioning audit and reconciliation guidance](https://docs.aws.amazon.com/singlesignon/latest/userguide/reconcile-auto-provisioning.html#reconcile-auto-provisioning) | Added guidance for auditing and reconciling SCIM auto-provisioned users, groups, and group memberships using Identity Store APIs and AWS CLI commands. | October 17, 2025 | | [OIDC service request quotas](https://docs.aws.amazon.com/singlesignon/latest/userguide/limits.html#oidcthrottlelimits) | Added OIDC service request quotas, including rate limits for OAuth client registration, token creation, and other OIDC operations. | October 13, 2025 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | IAM Identity Center has updated the managed policies `AWSSSOMasterAccountAdministrator`, `AWSSSOMemberAccountAdministrator`, `AWSSSOReadOnly`, `AWSSSODirectoryAdministrator`, and `AWSSSODirectoryReadOnly` to include AWS KMS permissions required for IAM Identity Center instances that use customer managed keys for encryption. | September 17, 2025 | | [Customer managed keys for encryption at rest](https://docs.aws.amazon.com/singlesignon/latest/userguide/identity-center-customer-managed-keys) | Added support for customer managed KMS keys to encrypt workforce identity data at rest. | September 17, 2025 | | [Example resource-based policy to allow token creation](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-resource-based-policies.html) | Added example resource-based policy that allows token creation for authorized client appplications. | September 16, 2025 | | [Support for user background sessions](https://docs.aws.amazon.com/singlesignon/latest/userguide/user-background-sessions.html) | Added content for user background sessions. | August 11, 2025 | | [Identity-enhanced console sessions](https://docs.aws.amazon.com/singlesignon/latest/userguide/identity-enhanced-sessions.html) | Updated terminology for identity-enhanced console sessions (previously known as identity-aware sessions). | May 12, 2025 | | [Getting started reorganization](https://docs.aws.amazon.com/singlesignon/latest/userguide/getting-started.html) | Reorganized getting started content for improved clarity and user experience. | May 6, 2025 | | [Deprecate IAM Identity Center AD Sync](https://docs.aws.amazon.com/singlesignon/latest/userguide/provision-users-from-ad-configurable-ADsync.html) | You can no longer provision Active Directory users with IAM Identity Center AD Sync. Instead, you can use IAM Identity Center configurable AD Sync. | April 17, 2025 | | [Updated content for Authenticated session](https://docs.aws.amazon.com/singlesignon/latest/userguide/authconcept.html) | Update to IAM Identity Center session durations when user session is deleted. | April 2, 2025 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSSSOServiceRolePolicy) | Updated permissions for the `AWSSSOServiceRolePolicy` AWS managed policy. | February 11, 2025 | | [IAM Identity Center enablement workflow improved](https://docs.aws.amazon.com/singlesignon/latest/userguide/enable-identity-center.html) | Updated workflow for enabling organization instances and account instances of IAM Identity Center. | February 11, 2025 | | [Updates for IAM Identity Center enablement](https://docs.aws.amazon.com/singlesignon/latest/userguide/enable-identity-center.html) | Updated contents and procedures for enabling organization instances and account instances of IAM Identity Center. | October 10, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSIAMIdentityCenterAllowListForIdentityContext) | Updated permissions for the `AWSIAMIdentityCenterAllowListForIdentityContext` AWS managed policy. | October 2, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSSSOMasterAccountAdministrator) | Updated permissions for the `AWSSSOMasterAccountAdministrator` AWS managed policy. | September 26, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSIAMIdentityCenterAllowListForIdentityContext) | Updated permissions for the `AWSIAMIdentityCenterAllowListForIdentityContext` AWS managed policy. | September 4, 2024 | | [Updates to the "What is IAM Identity Center?" topic](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html) | Updated the content that describes the benefits and capabilities of IAM Identity Center. | August 19, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSIAMIdentityCenterAllowListForIdentityContext) | Updated permissions for the `AWSIAMIdentityCenterAllowListForIdentityContext` AWS managed policy. | July 12, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSIAMIdentityCenterAllowListForIdentityContext) | Updated permissions for the `AWSIAMIdentityCenterAllowListForIdentityContext` AWS managed policy. | June 27, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Updated permissions for the `AWSIAMIdentityCenterAllowListForIdentityContext` AWS managed policy. | May 17, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Updated permissions for the `AWSIAMIdentityCenterAllowListForIdentityContext` AWS managed policy. | April 30, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Updated permissions for the `AWSSSOMasterAccountAdministrator` AWS managed policy. | April 26, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Updated permissions for the `AWSSSOMemberAccountAdministrator` AWS managed policy. | April 26, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Updated permissions for the `AWSSSOReadOnly` AWS managed policy. | April 26, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates) | Updated permissions for the `AWSIAMIdentityCenterAllowListForIdentityContext` AWS managed policy. | April 26, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSIAMIdentityCenterAllowListForIdentityContext) | Updated permissions for the `AWSIAMIdentityCenterAllowListForIdentityContext` AWS managed policy. | April 24, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSIAMIdentityCenterAllowListForIdentityContext) | Updated permissions for the `AWSIAMIdentityCenterAllowListForIdentityContext` AWS managed policy. | April 19, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSIAMIdentityCenterAllowListForIdentityContext) | Updated permissions for the `AWSIAMIdentityCenterAllowListForIdentityContext` AWS managed policy. | April 11, 2024 | | [Updates for AWS managed policy](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html) | Updated permissions for the `AWSIAMIdentityCenterAllowListForIdentityContext` AWS managed policy. | November 26, 2023 | | [New AWS managed policy topic](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html) | Added details for the `AWSIAMIdentityCenterAllowListForIdentityContext` AWS managed policy. | November 15, 2023 | | [Enhanced guidance for getting started with IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/getting-started.html) | Added new content for getting started with IAM Identity Center and creating an administrative user | September 23, 2022 | | [Updated users and groups in the Identity Center API Reference](https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html) | This update includes references to the new Create, Update and Delete APIs in the Identity Center API Reference Guide. | August 31, 2022 | | [AWS Single Sign-On (AWS SSO) renamed to AWS IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html#renamed) | AWS introduces AWS IAM Identity Center. IAM Identity Center expands the capabilities of AWS Identity and Access Management (IAM) to help you centrally manage account and access to applications for your workforce users. IAM Identity Center features include application assignments, multi-account permissions, and an AWS access portal. | July 26, 2022 | | [Support for permissions boundaries and customer managed policies in permission sets](https://docs.aws.amazon.com/singlesignon/latest/userguide/permissionsets.html) | Added content for using AWS managed and customer managed AWS Identity and Access Management (IAM) policies with permission sets. | July 14, 2022 | | [Support for manually enabled AWS Regions](https://docs.aws.amazon.com/singlesignon/latest/userguide/regions.html) | Added content for using IAM Identity Center in manually enabled Regions. | June 15, 2022 | | [Updates for AWS managed policies](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html) | Updated permissions for the `AWSSSOServiceRolePolicy` AWS managed policy. | May 11, 2022 | | [Support for delegated administration](https://docs.aws.amazon.com/singlesignon/latest/userguide/delegated-admin.html) | Added content for the delegated administration feature. | May 11, 2022 | | [Updates for AWS managed policies](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html) | Updated permissions for the `AWSSSOMasterAccountAdministrator`, `AWSSSOMemberAccountAdministrator`, and `AWSSSOReadOnly` AWS managed policies. | April 28, 2022 | | [Support for configurable AD sync](https://docs.aws.amazon.com/singlesignon/latest/userguide/provision-users-from-ad-configurable-ADsync.html) | Added content for the configurable AD sync feature. | April 14, 2022 | | [New AWS managed policy topic](https://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html) | Added details for the `AWSSSOMasterAccountAdministrator` AWS managed policy. | August 4, 2021 | | [Updates for quotas](https://docs.aws.amazon.com/singlesignon/latest/userguide/limits.html) | Adjustments to quota tables. | December 21, 2020 | | [New example policies](https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html) | Added new customer managed policy examples and updates to the permissions required section. | December 21, 2020 | | [Support for attribute-based access control (ABAC)](https://docs.aws.amazon.com/singlesignon/latest/userguide/abac.html) | Added content for ABAC feature. | November 24, 2020 | | [Support for MFA forced enrollment](https://docs.aws.amazon.com/singlesignon/latest/userguide/how-to-configure-mfa-device-enforcement.html) | Updates to require users to enroll an MFA device at sign-in. | November 23, 2020 | | [Support for WebAuthn](https://docs.aws.amazon.com/singlesignon/latest/userguide/mfa-types-keys.html) | Added content for new WebAuthn feature. | November 20, 2020 | | [Support for Ping Identity](https://docs.aws.amazon.com/singlesignon/latest/userguide/pingidentity.html) | Added content to integrate with Ping Identity products as a supported external identity provider. | October 26, 2020 | | [Support for OneLogin](https://docs.aws.amazon.com/singlesignon/latest/userguide/onelogin-idp.html) | Added content to integrate with OneLogin as a supported external identity provider. | July 31, 2020 | | [Support for Okta](https://docs.aws.amazon.com/singlesignon/latest/userguide/okta-idp.html) | Added content to integrate with Okta as a supported external identity provider. | May 28, 2020 | | [Support for external identity providers](https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-identity-source.html) | Changed references from directory to identity source, added content to support external identity providers. | November 26, 2019 | | [New MFA settings](https://docs.aws.amazon.com/singlesignon/latest/userguide/enable-mfa.html) | Removed two-step verification topic and added new MFA topic in its place. | October 24, 2019 | | [New setting to add two-step verification](https://docs.aws.amazon.com/singlesignon/latest/userguide/enable-mfa.html) | Added content on how to enable two-step verification for users. | January 16, 2019 | | [Support for session duration on AWS accounts](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtosessionduration.html) | Added content on how to set the session duration for an AWS account. | October 30, 2018 | | [New option to use Identity Center directory](https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-identity-source.html) | Added content for choosing either Identity Center directory or connecting to an existing directory in Active Directory. | October 17, 2018 | | [Support for relay state and session duration on applications](https://docs.aws.amazon.com/singlesignon/latest/userguide/appproperties.html) | Added content about relay state and session duration for applications. | October 10, 2018 | | [Additional support for new applications](https://docs.aws.amazon.com/singlesignon/latest/userguide/saasapps.html) | Added 4me, BambooHR, Bonusly, Citrix ShareFile, ClickTime, Convo, Deputy, Deskpro, Dome9, DruvaInSync, Egnyte, Engagedly, Expensify, Freshdesk, IdeaScale, Igloo, Jitbit, Kudos, LiquidFiles, Lucidchart, PurelyHR, Samanage, ScreenSteps, Sli.do, SmartSheet, Syncplicity, TalentLMS, Trello, UserVoice, Zoho, OpsGenie, DigiCert, WeekDone, ProdPad, and UserEcho to the application catalog. | August 3, 2018 | | [Support for multi-account access to management accounts](https://docs.aws.amazon.com/singlesignon/latest/userguide/useraccess.html) | Added content about how to delegate multi-account access to users in a management account. | July 9, 2018 | | [Support for new applications](https://docs.aws.amazon.com/singlesignon/latest/userguide/saasapps.html) | Added DocuSign, Keeper Security, and SugarCRM to the application catalog. | March 16, 2018 | | [Get temporary credentials for CLI access](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtogetcredentials.html) | Added information about how to get temporary credentials to run AWS CLI commands. | February 22, 2018 | | [New guide](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html) | This is the first release of the IAM Identity Center User Guide. | December 7, 2017 |