Organizations

SSO organizations represent your AWS Identity Center instances. Each org has:

• Name — display label
• Region — SSO region (e.g. eu-west-1)
• Start URL — Identity Center portal URL (e.g. https://your-org.awsapps.com/start)

Add an organization

Click + in the toolbar to open the SSO organizations panel. Click Add organization, fill in the fields, then click Sync.

Sync profiles

Click the sync button (↻) next to an org to:

1. Call aws sso login via the start URL (opens browser if needed)
2. Enumerate accounts and roles via Identity Center API
3. Write generated profiles to ~/.aws/config inside # BEGIN/END MIMIC GENERATED SSO PROFILES markers
4. Scan the updated config and merge into the UI

Sync is idempotent — run it anytime access changes.

-->

Multiple organizations

Add multiple orgs for multi-account/multi-Identity-Center setups. Profiles are grouped by org for filtering.

Remove an organization

Deleting an org removes its generated profiles from ~/.aws/config (the # BEGIN/END MIMIC GENERATED SSO PROFILES block) and drops the org from the filter chips.

Organization detection

Profiles are matched to orgs by:

1. sso_session name (matches the slug derived from org name)
2. sso_start_url (matches the org's start URL)

Profiles that don't match any configured org appear under "n/a" in the filter chips.