# Trusted identity propagation use cases
<a name="trustedidentitypropagation-integrations"></a>

As an IAM Identity Center administrator, you might be asked to help configure trusted identity propagation from user facing applications to Amazon Web Services services. To support this request, you'll need the following information:
+ What client-facing application will your users interface with?
+ Which Amazon Web Services services are used to query the data and to authorize access to the data?
+ Which Amazon Web Services service authorizes access to the data?

Your role in enabling **trusted identity propagation use cases that do not involve third-party applications or custom-developed applications** is to:

1. [Enable IAM Identity Center](enable-identity-center.md).

1. [Connect your existing source of identities to IAM Identity Center](tutorials.md).

The remaining steps of the trusted identity configuration for these use cases are performed within the connected Amazon Web Services services and applications. The administrators of the connected Amazon Web Services services or applications should refer to the respective user guides for comprehensive service-specific guidance. 

Your role in enabling **trusted identity propagation use cases that involve third-party applications or custom-developed applications** includes the steps of [Enable IAM Identity Center](enable-identity-center.md) and [connecting your source of identities](tutorials.md) as well as:

1. Configuring the connection of your identity provider (IdP) to the third-party party or custom-developed application.

1. Enabling IAM Identity Center to recognize the third-party or custom-developed application.

1. Configuring your IdP as a trusted token issuer in IAM Identity Center. For more information, see [Using applications with a trusted token issuer](using-apps-with-trusted-token-issuer.md).

The administrators of the connected applications and Amazon Web Services services should refer to the respective user guides for comprehensive service-specific guidance.

## Analytics, data lakehouse, and machine learning use cases
<a name="tip-data-analytic-usecases-overview"></a>

You can enable trusted propagation use cases with the following analytics and machine learning services:
+ **Amazon Redshift** - For guidance, see [Trusted identity propagation with Amazon Redshift](tip-usecase-redshift.md).
+ **Amazon EMR** - For guidance, see [Trusted identity propagation with Amazon EMR](tip-usecase-emr.md).
+ **Amazon Athena** - For guidance, see [Trusted identity propagation with Amazon Athena](tip-usecase-ate.md).
+ **SageMaker Studio** - For guidance, see [Trusted identity propagation with Amazon SageMaker Studio](trusted-identity-propagation-usecase-sagemaker-studio.md).

## Additional use cases
<a name="tip-additional-usecases"></a>

You can enable IAM Identity Center and trusted identity propagation with these additional Amazon Web Services services:
+ **Amazon Q Business** - for guidance, see:
  + [Admin workflow for apps using IAM Identity Center](https://docs.amazonaws.cn//amazonq/latest/qbusiness-ug/how-it-works.html#admin-flow-idc).
  + [Configuring an Amazon Q Business application using IAM Identity Center](https://docs.amazonaws.cn//amazonq/latest/qbusiness-ug/create-application.html).
  + [Configure Amazon Q Business with IAM Identity Center trusted identity propagation](https://amazonaws-china.com/blogs//machine-learning/configuring-amazon-q-business-with-aws-iam-identity-center-trusted-identity-propagation/).
+ **Amazon OpenSearch Service** - for guidance, see:
  + [IAM Identity Center Trusted Identity Propagation Support for Amazon OpenSearch Service](https://docs.amazonaws.cn//opensearch-service/latest/developerguide/idc-aos.html).
  + [Centralized OpenSearch user interface (Dashboards) with Amazon OpenSearch Service](https://docs.amazonaws.cn//opensearch-service/latest/developerguide/application.html).
+ **Amazon Transfer Family** - for guidance, see:
  + [Transfer Family web apps](https://docs.amazonaws.cn//transfer/latest/userguide/web-app.html).

**Topics**
+ [Analytics, data lakehouse, and machine learning use cases](#tip-data-analytic-usecases-overview)
+ [Additional use cases](#tip-additional-usecases)
+ [Trusted identity propagation with Amazon Redshift](tip-usecase-redshift.md)
+ [Trusted identity propagation with Amazon EMR](tip-usecase-emr.md)
+ [Trusted identity propagation with Amazon Athena](tip-usecase-ate.md)
+ [Trusted identity propagation with Amazon SageMaker Studio](trusted-identity-propagation-usecase-sagemaker-studio.md)