Enterprise SSO architecture integrating Microsoft Entra ID with AWS IAM Identity Center for federated access management. Entra ID authenticates users and passes identity assertions to IAM Identity Center, which maps identities to Permission Sets that assume IAM Roles with scoped access to AWS resources including EC2, S3, RDS, and monitoring services. This pattern eliminates password management in AWS, enforces centralized identity governance, and provides audit trails through CloudTrail for compliance. Fork and customize this diagram to match your organization's account structure, permission boundaries, and resource access policies. Consider adding additional identity providers or conditional access policies for enhanced security posture.