I recently set up AWS SSO on an engagement. In this instance, I was setting it up using AWS Managed Active Directory as the identity provider. My first impression was how incredibly easy it was to set up the integration of SSO with the Managed AD. The SSO console basically prompts you for your Managed AD instance from a dropdown list. You connect it, and that’s it. AWS Managed AD comes with an OU already set up for you that SSO federates with.