AWS IAM Identity Center endpoints and quotas
To connect programmatically to an AWS service, you use an endpoint. AWS services offer the following endpoint types in some or all of the AWS Regions that the service supports: IPv4 endpoints, dual-stack endpoints, and FIPS endpoints. Some services provide global endpoints. For more information, see AWS service endpoints.
Service quotas, also referred to as limits, are the maximum number of service resources or operations for your AWS account. For more information, see AWS service quotas.
The following are the service endpoints and service quotas for this service.
Service endpoints
IAM Identity Center
| Region Name | Region | Endpoint | Protocol |
|---|---|---|---|
| US East (Ohio) | us-east-2 |
sso.us-east-2.amazonaws.com sso-fips.us-east-2.api.aws sso.us-east-2.api.aws |
HTTPS HTTPS HTTPS |
| US East (N. Virginia) | us-east-1 |
sso.us-east-1.amazonaws.com sso-fips.us-east-1.api.aws sso.us-east-1.api.aws |
HTTPS HTTPS HTTPS |
| US West (N. California) | us-west-1 |
sso.us-west-1.amazonaws.com sso-fips.us-west-1.api.aws sso.us-west-1.api.aws |
HTTPS HTTPS HTTPS |
| US West (Oregon) | us-west-2 |
sso.us-west-2.amazonaws.com sso-fips.us-west-2.api.aws sso.us-west-2.api.aws |
HTTPS HTTPS HTTPS |
| Africa (Cape Town) | af-south-1 |
sso.af-south-1.amazonaws.com sso.af-south-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (Hong Kong) | ap-east-1 |
sso.ap-east-1.amazonaws.com sso.ap-east-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (Hyderabad) | ap-south-2 |
sso.ap-south-2.amazonaws.com sso.ap-south-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Jakarta) | ap-southeast-3 |
sso.ap-southeast-3.amazonaws.com sso.ap-southeast-3.api.aws |
HTTPS HTTPS |
| Asia Pacific (Malaysia) | ap-southeast-5 |
sso.ap-southeast-5.amazonaws.com sso.ap-southeast-5.api.aws |
HTTPS HTTPS |
| Asia Pacific (Melbourne) | ap-southeast-4 |
sso.ap-southeast-4.amazonaws.com sso.ap-southeast-4.api.aws |
HTTPS HTTPS |
| Asia Pacific (Mumbai) | ap-south-1 |
sso.ap-south-1.amazonaws.com sso.ap-south-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (New Zealand) | ap-southeast-6 |
sso.ap-southeast-6.amazonaws.com sso.ap-southeast-6.api.aws |
HTTPS HTTPS |
| Asia Pacific (Osaka) | ap-northeast-3 |
sso.ap-northeast-3.amazonaws.com sso.ap-northeast-3.api.aws |
HTTPS HTTPS |
| Asia Pacific (Seoul) | ap-northeast-2 |
sso.ap-northeast-2.amazonaws.com sso.ap-northeast-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Singapore) | ap-southeast-1 |
sso.ap-southeast-1.amazonaws.com sso.ap-southeast-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (Sydney) | ap-southeast-2 |
sso.ap-southeast-2.amazonaws.com sso.ap-southeast-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Taipei) | ap-east-2 |
sso.ap-east-2.amazonaws.com sso.ap-east-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Thailand) | ap-southeast-7 |
sso.ap-southeast-7.amazonaws.com sso.ap-southeast-7.api.aws |
HTTPS HTTPS |
| Asia Pacific (Tokyo) | ap-northeast-1 |
sso.ap-northeast-1.amazonaws.com sso.ap-northeast-1.api.aws |
HTTPS HTTPS |
| Canada (Central) | ca-central-1 |
sso.ca-central-1.amazonaws.com sso-fips.ca-central-1.api.aws sso.ca-central-1.api.aws |
HTTPS HTTPS HTTPS |
| Canada West (Calgary) | ca-west-1 |
sso.ca-west-1.amazonaws.com sso-fips.ca-west-1.api.aws sso.ca-west-1.api.aws |
HTTPS HTTPS HTTPS |
| Europe (Frankfurt) | eu-central-1 |
sso.eu-central-1.amazonaws.com sso.eu-central-1.api.aws |
HTTPS HTTPS |
| Europe (Ireland) | eu-west-1 |
sso.eu-west-1.amazonaws.com sso.eu-west-1.api.aws |
HTTPS HTTPS |
| Europe (London) | eu-west-2 |
sso.eu-west-2.amazonaws.com sso.eu-west-2.api.aws |
HTTPS HTTPS |
| Europe (Milan) | eu-south-1 |
sso.eu-south-1.amazonaws.com sso.eu-south-1.api.aws |
HTTPS HTTPS |
| Europe (Paris) | eu-west-3 |
sso.eu-west-3.amazonaws.com sso.eu-west-3.api.aws |
HTTPS HTTPS |
| Europe (Spain) | eu-south-2 |
sso.eu-south-2.amazonaws.com sso.eu-south-2.api.aws |
HTTPS HTTPS |
| Europe (Stockholm) | eu-north-1 |
sso.eu-north-1.amazonaws.com sso.eu-north-1.api.aws |
HTTPS HTTPS |
| Europe (Zurich) | eu-central-2 |
sso.eu-central-2.amazonaws.com sso.eu-central-2.api.aws |
HTTPS HTTPS |
| Israel (Tel Aviv) | il-central-1 |
sso.il-central-1.amazonaws.com sso.il-central-1.api.aws |
HTTPS HTTPS |
| Mexico (Central) | mx-central-1 |
sso.mx-central-1.amazonaws.com sso.mx-central-1.api.aws |
HTTPS HTTPS |
| Middle East (Bahrain) | me-south-1 |
sso.me-south-1.amazonaws.com sso.me-south-1.api.aws |
HTTPS HTTPS |
| Middle East (UAE) | me-central-1 |
sso.me-central-1.amazonaws.com sso.me-central-1.api.aws |
HTTPS HTTPS |
| South America (São Paulo) | sa-east-1 |
sso.sa-east-1.amazonaws.com sso.sa-east-1.api.aws |
HTTPS HTTPS |
| AWS GovCloud (US-East) | us-gov-east-1 |
sso.us-gov-east-1.amazonaws.com sso.us-gov-east-1.api.aws |
HTTPS HTTPS |
| AWS GovCloud (US-West) | us-gov-west-1 |
sso.us-gov-west-1.amazonaws.com sso.us-gov-west-1.api.aws |
HTTPS HTTPS |
Identity Store
| Region Name | Region | Endpoint | Protocol |
|---|---|---|---|
| US East (Ohio) | us-east-2 |
identitystore.us-east-2.amazonaws.com identitystore.us-east-2.api.aws identitystore-fips.us-east-2.api.aws |
HTTPS HTTPS HTTPS |
| US East (N. Virginia) | us-east-1 |
identitystore.us-east-1.amazonaws.com identitystore.us-east-1.api.aws identitystore-fips.us-east-1.api.aws |
HTTPS HTTPS HTTPS |
| US West (N. California) | us-west-1 |
identitystore.us-west-1.amazonaws.com identitystore.us-west-1.api.aws identitystore-fips.us-west-1.api.aws |
HTTPS HTTPS HTTPS |
| US West (Oregon) | us-west-2 |
identitystore.us-west-2.amazonaws.com identitystore.us-west-2.api.aws identitystore-fips.us-west-2.api.aws |
HTTPS HTTPS HTTPS |
| Africa (Cape Town) | af-south-1 |
identitystore.af-south-1.amazonaws.com identitystore.af-south-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (Hong Kong) | ap-east-1 |
identitystore.ap-east-1.amazonaws.com identitystore.ap-east-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (Hyderabad) | ap-south-2 |
identitystore.ap-south-2.amazonaws.com identitystore.ap-south-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Jakarta) | ap-southeast-3 |
identitystore.ap-southeast-3.amazonaws.com identitystore.ap-southeast-3.api.aws |
HTTPS HTTPS |
| Asia Pacific (Malaysia) | ap-southeast-5 |
identitystore.ap-southeast-5.amazonaws.com identitystore.ap-southeast-5.api.aws |
HTTPS HTTPS |
| Asia Pacific (Melbourne) | ap-southeast-4 |
identitystore.ap-southeast-4.amazonaws.com identitystore.ap-southeast-4.api.aws |
HTTPS HTTPS |
| Asia Pacific (Mumbai) | ap-south-1 |
identitystore.ap-south-1.amazonaws.com identitystore.ap-south-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (New Zealand) | ap-southeast-6 |
identitystore.ap-southeast-6.amazonaws.com identitystore.ap-southeast-6.api.aws |
HTTPS HTTPS |
| Asia Pacific (Osaka) | ap-northeast-3 |
identitystore.ap-northeast-3.amazonaws.com identitystore.ap-northeast-3.api.aws |
HTTPS HTTPS |
| Asia Pacific (Seoul) | ap-northeast-2 |
identitystore.ap-northeast-2.amazonaws.com identitystore.ap-northeast-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Singapore) | ap-southeast-1 |
identitystore.ap-southeast-1.amazonaws.com identitystore.ap-southeast-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (Sydney) | ap-southeast-2 |
identitystore.ap-southeast-2.amazonaws.com identitystore.ap-southeast-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Taipei) | ap-east-2 |
identitystore.ap-east-2.amazonaws.com identitystore.ap-east-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Thailand) | ap-southeast-7 |
identitystore.ap-southeast-7.amazonaws.com identitystore.ap-southeast-7.api.aws |
HTTPS HTTPS |
| Asia Pacific (Tokyo) | ap-northeast-1 |
identitystore.ap-northeast-1.amazonaws.com identitystore.ap-northeast-1.api.aws |
HTTPS HTTPS |
| Canada (Central) | ca-central-1 |
identitystore.ca-central-1.amazonaws.com identitystore.ca-central-1.api.aws identitystore-fips.ca-central-1.api.aws |
HTTPS HTTPS HTTPS |
| Canada West (Calgary) | ca-west-1 |
identitystore.ca-west-1.amazonaws.com identitystore.ca-west-1.api.aws identitystore-fips.ca-west-1.api.aws |
HTTPS HTTPS HTTPS |
| Europe (Frankfurt) | eu-central-1 |
identitystore.eu-central-1.amazonaws.com identitystore.eu-central-1.api.aws |
HTTPS HTTPS |
| Europe (Ireland) | eu-west-1 |
identitystore.eu-west-1.amazonaws.com identitystore.eu-west-1.api.aws |
HTTPS HTTPS |
| Europe (London) | eu-west-2 |
identitystore.eu-west-2.amazonaws.com identitystore.eu-west-2.api.aws |
HTTPS HTTPS |
| Europe (Milan) | eu-south-1 |
identitystore.eu-south-1.amazonaws.com identitystore.eu-south-1.api.aws |
HTTPS HTTPS |
| Europe (Paris) | eu-west-3 |
identitystore.eu-west-3.amazonaws.com identitystore.eu-west-3.api.aws |
HTTPS HTTPS |
| Europe (Spain) | eu-south-2 |
identitystore.eu-south-2.amazonaws.com identitystore.eu-south-2.api.aws |
HTTPS HTTPS |
| Europe (Stockholm) | eu-north-1 |
identitystore.eu-north-1.amazonaws.com identitystore.eu-north-1.api.aws |
HTTPS HTTPS |
| Europe (Zurich) | eu-central-2 |
identitystore.eu-central-2.amazonaws.com identitystore.eu-central-2.api.aws |
HTTPS HTTPS |
| Israel (Tel Aviv) | il-central-1 |
identitystore.il-central-1.amazonaws.com identitystore.il-central-1.api.aws |
HTTPS HTTPS |
| Mexico (Central) | mx-central-1 |
identitystore.mx-central-1.amazonaws.com identitystore.mx-central-1.api.aws |
HTTPS HTTPS |
| Middle East (Bahrain) | me-south-1 |
identitystore.me-south-1.amazonaws.com identitystore.me-south-1.api.aws |
HTTPS HTTPS |
| Middle East (UAE) | me-central-1 |
identitystore.me-central-1.amazonaws.com identitystore.me-central-1.api.aws |
HTTPS HTTPS |
| South America (São Paulo) | sa-east-1 |
identitystore.sa-east-1.amazonaws.com identitystore.sa-east-1.api.aws |
HTTPS HTTPS |
| AWS GovCloud (US-East) | us-gov-east-1 |
identitystore.us-gov-east-1.amazonaws.com identitystore.us-gov-east-1.api.aws |
HTTPS HTTPS |
| AWS GovCloud (US-West) | us-gov-west-1 |
identitystore.us-gov-west-1.amazonaws.com identitystore.us-gov-west-1.api.aws |
HTTPS HTTPS |
IAM Identity Center OpenID Connect (OIDC)
| Region Name | Region | Endpoint | Protocol |
|---|---|---|---|
| US East (Ohio) | us-east-2 |
oidc.us-east-2.amazonaws.com oidc-fips.us-east-2.api.aws oidc.us-east-2.api.aws |
HTTPS HTTPS HTTPS |
| US East (N. Virginia) | us-east-1 |
oidc.us-east-1.amazonaws.com oidc-fips.us-east-1.api.aws oidc.us-east-1.api.aws |
HTTPS HTTPS HTTPS |
| US West (N. California) | us-west-1 |
oidc.us-west-1.amazonaws.com oidc-fips.us-west-1.api.aws oidc.us-west-1.api.aws |
HTTPS HTTPS HTTPS |
| US West (Oregon) | us-west-2 |
oidc.us-west-2.amazonaws.com oidc-fips.us-west-2.api.aws oidc.us-west-2.api.aws |
HTTPS HTTPS HTTPS |
| Africa (Cape Town) | af-south-1 |
oidc.af-south-1.amazonaws.com oidc.af-south-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (Hong Kong) | ap-east-1 |
oidc.ap-east-1.amazonaws.com oidc.ap-east-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (Hyderabad) | ap-south-2 |
oidc.ap-south-2.amazonaws.com oidc.ap-south-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Jakarta) | ap-southeast-3 |
oidc.ap-southeast-3.amazonaws.com oidc.ap-southeast-3.api.aws |
HTTPS HTTPS |
| Asia Pacific (Malaysia) | ap-southeast-5 |
oidc.ap-southeast-5.amazonaws.com oidc.ap-southeast-5.api.aws |
HTTPS HTTPS |
| Asia Pacific (Melbourne) | ap-southeast-4 |
oidc.ap-southeast-4.amazonaws.com oidc.ap-southeast-4.api.aws |
HTTPS HTTPS |
| Asia Pacific (Mumbai) | ap-south-1 |
oidc.ap-south-1.amazonaws.com oidc.ap-south-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (New Zealand) | ap-southeast-6 |
oidc.ap-southeast-6.amazonaws.com oidc.ap-southeast-6.api.aws |
HTTPS HTTPS |
| Asia Pacific (Osaka) | ap-northeast-3 |
oidc.ap-northeast-3.amazonaws.com oidc.ap-northeast-3.api.aws |
HTTPS HTTPS |
| Asia Pacific (Seoul) | ap-northeast-2 |
oidc.ap-northeast-2.amazonaws.com oidc.ap-northeast-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Singapore) | ap-southeast-1 |
oidc.ap-southeast-1.amazonaws.com oidc.ap-southeast-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (Sydney) | ap-southeast-2 |
oidc.ap-southeast-2.amazonaws.com oidc.ap-southeast-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Taipei) | ap-east-2 |
oidc.ap-east-2.amazonaws.com oidc.ap-east-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Thailand) | ap-southeast-7 |
oidc.ap-southeast-7.amazonaws.com oidc.ap-southeast-7.api.aws |
HTTPS HTTPS |
| Asia Pacific (Tokyo) | ap-northeast-1 |
oidc.ap-northeast-1.amazonaws.com oidc.ap-northeast-1.api.aws |
HTTPS HTTPS |
| Canada (Central) | ca-central-1 |
oidc.ca-central-1.amazonaws.com oidc-fips.ca-central-1.api.aws oidc.ca-central-1.api.aws |
HTTPS HTTPS HTTPS |
| Canada West (Calgary) | ca-west-1 |
oidc.ca-west-1.amazonaws.com oidc-fips.ca-west-1.api.aws oidc.ca-west-1.api.aws |
HTTPS HTTPS HTTPS |
| Europe (Frankfurt) | eu-central-1 |
oidc.eu-central-1.amazonaws.com oidc.eu-central-1.api.aws |
HTTPS HTTPS |
| Europe (Ireland) | eu-west-1 |
oidc.eu-west-1.amazonaws.com oidc.eu-west-1.api.aws |
HTTPS HTTPS |
| Europe (London) | eu-west-2 |
oidc.eu-west-2.amazonaws.com oidc.eu-west-2.api.aws |
HTTPS HTTPS |
| Europe (Milan) | eu-south-1 |
oidc.eu-south-1.amazonaws.com oidc.eu-south-1.api.aws |
HTTPS HTTPS |
| Europe (Paris) | eu-west-3 |
oidc.eu-west-3.amazonaws.com oidc.eu-west-3.api.aws |
HTTPS HTTPS |
| Europe (Spain) | eu-south-2 |
oidc.eu-south-2.amazonaws.com oidc.eu-south-2.api.aws |
HTTPS HTTPS |
| Europe (Stockholm) | eu-north-1 |
oidc.eu-north-1.amazonaws.com oidc.eu-north-1.api.aws |
HTTPS HTTPS |
| Europe (Zurich) | eu-central-2 |
oidc.eu-central-2.amazonaws.com oidc.eu-central-2.api.aws |
HTTPS HTTPS |
| Israel (Tel Aviv) | il-central-1 |
oidc.il-central-1.amazonaws.com oidc.il-central-1.api.aws |
HTTPS HTTPS |
| Mexico (Central) | mx-central-1 |
oidc.mx-central-1.amazonaws.com oidc.mx-central-1.api.aws |
HTTPS HTTPS |
| Middle East (Bahrain) | me-south-1 |
oidc.me-south-1.amazonaws.com oidc.me-south-1.api.aws |
HTTPS HTTPS |
| Middle East (UAE) | me-central-1 |
oidc.me-central-1.amazonaws.com oidc.me-central-1.api.aws |
HTTPS HTTPS |
| South America (São Paulo) | sa-east-1 |
oidc.sa-east-1.amazonaws.com oidc.sa-east-1.api.aws |
HTTPS HTTPS |
| AWS GovCloud (US-East) | us-gov-east-1 |
oidc.us-gov-east-1.amazonaws.com oidc.us-gov-east-1.api.aws |
HTTPS HTTPS |
| AWS GovCloud (US-West) | us-gov-west-1 |
oidc.us-gov-west-1.amazonaws.com oidc.us-gov-west-1.api.aws |
HTTPS HTTPS |
Service quotas
| Name | Default | Adjustable | Description |
|---|---|---|---|
| File size of service provider SAML 2.0 certificates (in PEM format) | Each supported Region: 2 Kilobytes | No | The maximum file size (in KB) of service provider SAML 2.0 certificates (in PEM format). |
| Number of groups supported in IAM Identity Center | Each supported Region: 100,000 |
Yes |
The maximum number of groups supported in IAM Identity Center. |
| Number of permission sets allowed in IAM Identity Center | Each supported Region: 3,500 |
Yes |
The default number of permission sets in IAM Identity Center. |
| Number of permission sets allowed per AWS account | Each supported Region: 500 |
Yes |
The default number of permission sets allowed per AWS account. |
| Number of users supported in IAM Identity Center | Each supported Region: 200,000 |
Yes |
The default number of users supported in IAM Identity Center. |
| Total number of AWS accounts or applications that can be configured | Each supported Region: 7,000 |
Yes |
The default number of AWS accounts or applications that can be configured. This quota applies separately to AWS accounts and to applications. You can configure up to 7000 accounts and up to 7000 applications. |
| Total number of groups that can be assigned to a permission set per AWS account, or to an application | Each supported Region: 100 | No | Total number of groups that can be assigned to a permission set per AWS account, or to an application. |
| Total number of regions for IAM Identity Center | Each supported Region: 6 |
Yes |
The total number of regions that can be enabled for IAM Identity Center, including the primary region. |
For more information, see AWS IAM Identity Center quotas in the AWS IAM Identity Center User Guide.
