User Creation and Management is possible through AWS SSO

AWSSingle Sign-On (SSO) is a cloud SSO service which makes it simple to run SSO ingress to several AWS accounts and business applications. You can start a highly accessible SSO service without an advance expenditure and in progress maintenance price of operating your own SSO infrastructure only with a few clicks. You can smoothly control SSO and user sanctions to all of your accounts in AWS Organizations with AWS SSO. AWS SSO too covers built-in SAML integration to many business applications, like Salesforce, Box, and Office 365.

Users can search and ingress all of their allocated accounts and applications in one place with AWS SSO. Additionally, you can build Security Assertion Markup Language (SAML) 2.0 integration and enlarge SSO ingress to any of your SAML- enabled applications with the help of AWS Single Sign-On application configuration wizard. Users can directly sign in to a user portal with credentials they configure in AWS SSO or using their current corporate credentials to ingress all their allocated accounts and applications from one place.

AWS SSO gives you a directory by default that can be used to create users and manage them in groups within AWS SSO. You only requires users email id and name for configuration to create users in AWS SSO. Users can set their own password after user is created by AWS SSO then it sends an email to the user by default. Within minutes, you can allow your users and groups authorization to AWS resources in all your AWS accounts as well as various business applications. Your users sign in to a user portal with credentials they configured in AWS SSO to ingress all of their allocated accounts and applications in a one location.

To retain more information creating and managing users in AWS SSO, see How to create and manage users within AWS SSO.