SSOAdmin#
Client#
- class SSOAdmin.Client#
A low-level client representing AWS Single Sign-On Admin (SSO Admin)
IAM Identity Center (successor to Single Sign-On) helps you securely create, or connect, your workforce identities and manage their access centrally across Amazon Web Services accounts and applications. IAM Identity Center is the recommended approach for workforce authentication and authorization in Amazon Web Services, for organizations of any size and type.
Note
IAM Identity Center uses the
ssoandidentitystoreAPI namespaces.This reference guide provides information on single sign-on operations which could be used for access management of Amazon Web Services accounts. For information about IAM Identity Center features, see the IAM Identity Center User Guide.
Many operations in the IAM Identity Center APIs rely on identifiers for users and groups, known as principals. For more information about how to work with principals and principal IDs in IAM Identity Center, see the Identity Store API Reference.
Note
Amazon Web Services provides SDKs that consist of libraries and sample code for various programming languages and platforms (Java, Ruby, .Net, iOS, Android, and more). The SDKs provide a convenient way to create programmatic access to IAM Identity Center and other Amazon Web Services services. For more information about the Amazon Web Services SDKs, including how to download and install them, see Tools for Amazon Web Services.
import boto3 client = boto3.client('sso-admin')
These are the available methods:
- attach_customer_managed_policy_reference_to_permission_set
- attach_managed_policy_to_permission_set
- can_paginate
- close
- create_account_assignment
- create_application
- create_application_assignment
- create_instance
- create_instance_access_control_attribute_configuration
- create_permission_set
- create_trusted_token_issuer
- delete_account_assignment
- delete_application
- delete_application_access_scope
- delete_application_assignment
- delete_application_authentication_method
- delete_application_grant
- delete_inline_policy_from_permission_set
- delete_instance
- delete_instance_access_control_attribute_configuration
- delete_permission_set
- delete_permissions_boundary_from_permission_set
- delete_trusted_token_issuer
- describe_account_assignment_creation_status
- describe_account_assignment_deletion_status
- describe_application
- describe_application_assignment
- describe_application_provider
- describe_instance
- describe_instance_access_control_attribute_configuration
- describe_permission_set
- describe_permission_set_provisioning_status
- describe_trusted_token_issuer
- detach_customer_managed_policy_reference_from_permission_set
- detach_managed_policy_from_permission_set
- get_application_access_scope
- get_application_assignment_configuration
- get_application_authentication_method
- get_application_grant
- get_inline_policy_for_permission_set
- get_paginator
- get_permissions_boundary_for_permission_set
- get_waiter
- list_account_assignment_creation_status
- list_account_assignment_deletion_status
- list_account_assignments
- list_account_assignments_for_principal
- list_accounts_for_provisioned_permission_set
- list_application_access_scopes
- list_application_assignments
- list_application_assignments_for_principal
- list_application_authentication_methods
- list_application_grants
- list_application_providers
- list_applications
- list_customer_managed_policy_references_in_permission_set
- list_instances
- list_managed_policies_in_permission_set
- list_permission_set_provisioning_status
- list_permission_sets
- list_permission_sets_provisioned_to_account
- list_tags_for_resource
- list_trusted_token_issuers
- provision_permission_set
- put_application_access_scope
- put_application_assignment_configuration
- put_application_authentication_method
- put_application_grant
- put_inline_policy_to_permission_set
- put_permissions_boundary_to_permission_set
- tag_resource
- untag_resource
- update_application
- update_instance
- update_instance_access_control_attribute_configuration
- update_permission_set
- update_trusted_token_issuer
Client Exceptions#
Client exceptions are available on a client instance via the exceptions property. For more detailed instructions and examples on the exact usage of client exceptions, see the error handling user guide.
The available client exceptions are:
Paginators#
Paginators are available on a client instance via the get_paginator method. For more detailed instructions and examples on the usage of paginators, see the paginators user guide.
The available paginators are:
- ListAccountAssignmentCreationStatus
- ListAccountAssignmentDeletionStatus
- ListAccountAssignments
- ListAccountAssignmentsForPrincipal
- ListAccountsForProvisionedPermissionSet
- ListApplicationAccessScopes
- ListApplicationAssignments
- ListApplicationAssignmentsForPrincipal
- ListApplicationAuthenticationMethods
- ListApplicationGrants
- ListApplicationProviders
- ListApplications
- ListCustomerManagedPolicyReferencesInPermissionSet
- ListInstances
- ListManagedPoliciesInPermissionSet
- ListPermissionSetProvisioningStatus
- ListPermissionSets
- ListPermissionSetsProvisionedToAccount
- ListTagsForResource
- ListTrustedTokenIssuers