---
title: Amazon integrations
description: The Amazon Login Integration Kit allows PingFederate to use Amazon as an identity provider (IdP). This allows users to access service provider (SP) applications by signing on to Amazon.
component: amazon
page_id: amazon::pf_is_overview_of_amazon_integrations
canonical_url: https://docs.pingidentity.com/integrations/amazon/pf_is_overview_of_amazon_integrations.html
revdate: October 24, 2025
section_ids:
  amazon-login-integration-kit-formerly-the-amazon-cloud-identity-connector: Amazon Login Integration Kit (formerly the Amazon Cloud Identity Connector)
  aws-connector: AWS Connector
  aws-iam-identity-center-provisioner-aws-single-sign-on-connector: AWS IAM Identity Center Provisioner (AWS Single Sign-On Connector)
  amazon-web-services-session-tags-integrations-for-pingfederate-and-pingone: Amazon Web Services session tags integrations for PingFederate and PingOne
---

# Amazon integrations

## Amazon Login Integration Kit (formerly the Amazon Cloud Identity Connector)

The Amazon Login Integration Kit allows PingFederate to use Amazon as an identity provider (IdP) *(tooltip: \<div class="paragraph">
\<p>A service that manages identity information and provides authentication services to relying clients or SPs within a federated or distributed network.\</p>
\</div>)*. This allows users to access service provider (SP) *(tooltip: \<div class="paragraph">
\<p>In SAML, an entity that receives and accepts an authentication assertion issued by an IdP, typically for the purpose of allowing access to a protected resource.\</p>
\</div>)* applications by signing on to Amazon.

## AWS Connector

The Amazon Web Services (AWS) Connector allows PingFederate to integrate with Amazon's AWS Identity and Access Management service for provisioning and single sign-on (SSO) *(tooltip: \<div class="paragraph">
\<p>The process of authenticating an identity (signing on) at one website (usually with a user ID and password) and then accessing resources secured by other domains without reauthenticating.\</p>
\</div>)*.

## AWS IAM Identity Center Provisioner (AWS Single Sign-On Connector)

The AWS IAM Identity Center Provisioner allows PingFederate to integrate with Amazon's AWS IAM Identity Center service for provisioning and SSO.

## Amazon Web Services session tags integrations for PingFederate and PingOne

AWS session tags allow enterprises to use Ping Identity products for attribute-based access control (ABAC) *(tooltip: \<div class="paragraph">
\<p>Access control based on attributes of a user, such as how old a user is or whether the user is a paying customer.\</p>
\</div>)* in AWS. Includes instructions for PingFederate and PingOne for Customers using Security Assertion Markup Language (SAML) *(tooltip: \<div class="paragraph">
\<p>A standard, XML-based, message-exchange framework enabling the secure transmittal of authentication tokens and other user attributes across domains.\</p>
\</div>)* or OpenID Connect (OIDC) *(tooltip: \<div class="paragraph">
\<p>An authentication protocol built on top of OAuth that authenticates users and enables clients (relying parties) of all types to request and receive information about authenticated sessions and users. OIDC is extensible, allowing clients to use optional features such as encryption of identity data, discovery of OpenID Providers (OAuth authorization servers), and session management.\</p>
\</div>)*.