View a markdown version of this page

Managing access for users in the Identity Center directory - Amazon IAM Identity Center
Password managementMFA
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Managing access for users in the Identity Center directory

Learn how to manage passwords and multi-factor authentication (MFA) for users in the IAM Identity Center directory. These security features help protect user accounts.

Note

These features do not apply to Active Directory users or external identity provider users.

Administrators can manage both passwords and MFA through the IAM Identity Center console. These security features work only with the built-in Identity Center directory.

Password management

Password management includes these capabilities:

  • Reset passwords with email instructions

  • Generate one-time passwords

  • Configure automatic email verification for API-created users

Amazon enforces fixed security requirements, including complexity rules and password reuse restrictions.

MFA

MFA is enabled by default and supports up to eight devices per user.

Supported device types include:

  • Authenticator apps

  • Security keys

  • Built-in biometric authenticators

Administrators can register and manage MFA devices for users.

Topics