Granting access to non-developer resources

Question & Answer
, ,
1

We have a requirement to grant QuickSight dashboard access to non-engineer stakeholders via OKTA. Should we be leveraging our existing OKTA-AWS SSO Identity Provider integration or create a new Identity Provider specifically for this? Any best practices for this scenario?

2

Hi @sreerame,

Thank you for posting.

You can federate Amazon QuickSight with existing OKTA-AWS SSO IDP. Kindly review blog here and documentation here

Regards,
Demola

3

Thanks, @demola.

Cx question is more around if AWS has a recommendation/preference on how this needs to be done?

4

Hi @sreerame,
The recommendation would be different on a case to case basis. In my opinion it would be best practice to manage users the same way and use the same SSO that you already have linked. That way the process of managing RLS is the same and user management practices do not change. I think using the current SSO is the right path.

I will mark this as a solution but let me know if you have any remaining questions.

Thank you!