Sign in

v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1467365253.0 KB

Enables single sign-on for a directory. Single sign-on allows users in your directory to access certain Amazon Web Services services from a computer joined to the directory without having to enter their credentials separately.

post/#X-Amz-Target=DirectoryService_20150416.EnableSso

Headers

X-Amz-Target'DirectoryService_20150416.EnableSso' required

Request body

DirectoryIdstring required

The identifier of the directory for which to enable single-sign on.

UserNamestring
<p>The username of an alternate account to use to enable single-sign on. This is only used for AD Connector directories. This account must have privileges to add a service principal name.</p> <p>If the AD Connector service account does not have privileges to add a service principal name, you can specify an alternate account with the <i>UserName</i> and <i>Password</i> parameters. These credentials are only used to enable single sign-on and are not stored by the service. The AD Connector service account is not changed.</p>
Passwordstring password

The password of an alternate account to use to enable single-sign on. This is only used for AD Connector directories. For more information, see the <i>UserName</i> parameter.

Response

Success

EnableSsoResult required

Contains the results of the <a>EnableSso</a> operation.