# Confirm users can sign in to the Amazon Web Services access portal
<a name="howtosigninprocedure"></a>

The following steps are for IAM Identity Center administrator to confirm that the IAM Identity Center user can sign in to the Amazon Web Services access portal and access the Amazon Web Services account.

**Sign in to the Amazon Web Services access portal**

1. Do either of the following to sign in to the Amazon Web Services Management Console.
   + **New to Amazon (root user)** – Sign in as the account owner by choosing **Root user** and entering your Amazon Web Services account email address. On the next page, enter your password.
   + **Already using Amazon (IAM credentials)** – Sign in with your IAM credentials and select an admin role.

1. Open the [IAM Identity Center console](https://console.aws.amazon.com/singlesignon).

1. In the navigation pane, choose **Dashboard**.

1. On the **Dashboard** page, under **Settings summary**, choose the Amazon Web Services access portal URL.

1. Sign in by using either of the following:
   + If you are using Active Directory or an external identity provider (IdP) as your identity source, sign in by using the credentials of the Active Directory or IdP user.
   + If you are using the default Identity Center directory as your identity source, sign in by using the username that you specified when you created the user and the new password that you specified for the user.

1. In the **Accounts** tab, locate your Amazon Web Services account and expand it.

1. The roles available to you are displayed. For example, if you are assigned both the **AdministratorAccess** permission set and **Billing** permissions sets, those roles are displayed in the Amazon Web Services access portal. Choose the IAM role name you want to use for the session.

1. If you are redirected to the Amazon Management Console you successfully finished setting up access to the Amazon Web Services account.
**Note**  
If you do not see any **Amazon Web Services accounts** listed, it is likely that the user hasn't yet been assigned to a permission set for that account. For instructions on assigning users to a permission set, see [Assign user or group access to Amazon Web Services accounts](assignusers.md).

Now that you've confirmed that you can sign in using IAM Identity Center credentials, switch to the browser that you used to sign into the Amazon Web Services Management Console and sign out from your root user or IAM user credentials. 

**Important**  
We strongly recommend that you use the credentials of the IAM Identity Center administrative user when you sign in to the Amazon Web Services access portal to perform administrative tasks instead of using IAM user or root user credentials. Safeguard your root user credentials and use them to perform the tasks that only the root user can perform. To enable other users to access your accounts and applications, and to administer IAM Identity Center, create and assign permission sets only through IAM Identity Center.