# Federation and Single Sign-On

> Master cloud identity federation, SAML 2.0, OIDC, and SSO to securely connect on-premises directories with AWS, Azure, and GCP.

Canonical: https://codelivly.com/rooms/federation-and-single-sign-on
Last updated: 2026-09-24

| | |
|---|---|
| Level | Intermediate |
| Category | Cloud Security |
| Lessons | 3 |
| Estimated time | 30 min |
| XP | 100 |

This intermediate module explores the critical mechanisms of cloud identity federation and Single Sign-On (SSO). You will learn how to securely bridge on-premises identity providers (like Active Directory) with cloud environments using industry-standard protocols like SAML 2.0 and OpenID Connect (OIDC). The curriculum covers the configuration of trust relationships, the elimination of local cloud passwords, and the centralized management of user access via services like AWS IAM Identity Center, Microsoft Entra ID, and GCP Workforce Identity Federation. By mastering these concepts, you will drastically reduce credential theft risks, streamline user provisioning, and enforce consistent, zero-trust access controls across multi-cloud architectures.

## Lessons

1. What Is Identity Federation and Why Does It Matter (30 min)
2. SAML, OIDC and Cross-Account Trust (30 min)
3. Guided Lab: Configuring Federated Access Between Accounts (30 min)

## Related

- [Learning path: Cloud Identity and Access Management](https://codelivly.com/learning-paths/cloud-identity-and-access-management)
- [All rooms](https://codelivly.com/rooms)