> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/integrations/resource-integrations/aws/installation-methods/identity-center.md).

# Identity Center

Configure the P0 AWS IAM management integration to provision users through AWS Identity Center, matching them by user name or by their Identity Center email.

Choose the **Identity Center** login type when you provision access through AWS Identity Center — for example, when you provision users via SSO. P0 matches each requestor to an Identity Center identity and grants a per-request permission set.

## Prerequisites

* An [AWS IAM management integration](/integrations/resource-integrations/aws/installation-methods.md) installed on the management account where the Identity Center instance resides. You must install P0 on that account.

## Configure Identity Center provisioning

On the AWS IAM management configuration page, select **Via AWS Identity Center**, then use the **How are users identified in AWS Identity Center?** dropdown to tell P0 which Identity Center attribute holds the user's email address:

* **Username is user's email** (default): Select this option if each user's Identity Center user name equals their email address. P0 matches users by user name.
* **User's IDC email is user's email**: Select this option if user names don't equal email addresses and the email appears in the Identity Center email attribute instead. P0 matches users by email address.

To finish the configuration, select the management account in which the Identity Center instance resides, choose how to identify users, and click **Next**.

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-fa5b059b44db501efa8b9ee9dd8f114e715d2338%2FScreenshot%202024-04-26%20at%209.31.30%E2%80%AFAM.png?alt=media" alt="P0 AWS configuration set to provision users via AWS Identity Center" width="422"><figcaption></figcaption></figure>

## Related

* [Identity Center — merged permission set](/integrations/resource-integrations/aws/identity-center-merged.md)
* [Requesting AWS access](/integrations/resource-integrations/aws/requesting-access.md)
* [Setting up AWS IAM management](/integrations/resource-integrations/aws/installation-methods.md)