No more typing reviews! Try our Samantha, our new voice AI agent.

AWS Directory Service vs AWS IAM Identity Center comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 2, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

AWS Directory Service
Ranking in Identity and Access Management as a Service (IDaaS) (IAMaaS)
18th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
16
Ranking in other categories
No ranking in other categories
AWS IAM Identity Center
Ranking in Identity and Access Management as a Service (IDaaS) (IAMaaS)
8th
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
12
Ranking in other categories
Single Sign-On (SSO) (9th)
 

Mindshare comparison

As of August 2026, in the Identity and Access Management as a Service (IDaaS) (IAMaaS) category, the mindshare of AWS Directory Service is 1.0%, down from 1.7% compared to the previous year. The mindshare of AWS IAM Identity Center is 1.3%, down from 1.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Identity and Access Management as a Service (IDaaS) (IAMaaS) Mindshare Distribution
ProductMindshare (%)
AWS IAM Identity Center1.3%
AWS Directory Service1.0%
Other97.7%
Identity and Access Management as a Service (IDaaS) (IAMaaS)
 

Featured Reviews

Akram Zaki - PeerSpot reviewer
IT Specialist at FlairsTech
Hybrid directory service has streamlined global server access and supported reliable daily operations
Some features in AWS Directory Service are not automated and are not scriptable, so they require manual work. In today's world where everything is pretty much automated and scriptable using AI, this is a downside. The price is another concern. AWS is really expensive. They provide an awesome service in general, but it's still expensive, very expensive. AD Connector is an application which connects my own Active Directory to AWS Directory Service or AWS infrastructure. There is a bit of latency which is bound by the AD Connector availability. If the AD Connector is having issues, there is a bit of latency, but in general, it's way better than Microsoft Azure. Still, it could be better. The migration was a bit challenging and required intensive planning and migration time. That is always a hassle. No matter which cloud environment you're moving into, the migration is sensitive because you're generally moving from on-premise to a cloud environment, so there is downtime and there are unexpected issues and errors. It needs very careful planning before doing the migration itself. AWS Directory Service is lacking a few things which could be better. Single sign-on federation is missing. SCIM provisioning is not available. In my company, we use other services for SSO federation, SCIM provisioning, and authentication because of these gaps. I would like AWS Directory Service to enroll a multi-factor authentication method. I would like to have an SSO federation where users, if we're hosting applications in AWS, would not need to log in to each application. Single sign-on would log in the user to their account and from there they can open all their applications without requiring a login each time. One of the other cons in AWS is that directories cannot span multiple regions because it's a region-bound architecture. This requires several directories for multi-region deployment. This is the case on my end because my company has several branches all over the world, so it requires several deployments.
MO
Web developer at King of CMS Consulting
Centralized access control has improved team collaboration but still needs a simpler onboarding
One of the best features AWS IAM Identity Center offers is the permission set, which is one of the best. Then there are the temporary credentials via SSO, the multi-account governance, and the centralized identity management. Those are good features that I believe assist developers, and another feature I can say is one of the best is the improved security with temporary credentials. The feature I find myself relying on the most day-to-day would be the centralized identity management and multi-account governance. It allows me to check what other developers are doing and since I am the admin, I can also revoke the access they have to the AWS accounts.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Provides good performance and availability."
"AWS Directory Service is secure."
"AWS is very helpful and very useful for the infrastructure because that's how you can manage your Microsoft Office 365 user accounts with AWS-managed Microsoft Active Directory Services."
"I like the manageability, as Activate Connect makes it easier to assign information and to manage the resources in the network."
"This solution does what we want to achieve."
"AWS Directory Service is very useful; it is a role-based mechanism, similar to identity management, and it is one of the most useful AWS features."
"This is a managed directory service (by AWS) that offers a hands-free solution for our team as we are not required to hire or train people to manage Active Directory features and high availability backups, there is no security patching required on an operating system level or Active Directory malware attack, and we are able to easily integrate other AWS services."
"The most valuable feature of this solution is the security of my customers and my customers' customers."
"AWS IAM Identity Center has helped our organization by providing a unified dashboard to manage permissions and access controls."
"The solution helps us manage access in a time-efficient manner and offers reliable integration for our services, avoiding security breaches and maintaining operational efficiency."
"The product is easy for beginners to learn and use."
"The features of AWS IAM Identity Center that I appreciate are single sign-on and multi-factor authentication, and we can manage all authentication aspects while integrating it with third-party applications."
"The most valuable features of AWS IAM Identity Center are role-based permissions and existing permissions templates."
"The two most valuable features of IAM Identity Center are the security policy generation and automation in creating credentials."
"Its valuable features include granular access control, allowing precise control over who can access specific AWS resources and under what conditions using JSON-based policies."
"The organizational value of AWS IAM Identity Center is definitely significant, as it helps ensure that the least required permissions are given to users, thus preventing unnecessary access and reducing the risk of accidental deletions or changes."
 

Cons

"Can be improved by including on-premises access for services through Identity Access Management."
"The group policy can be improved."
"The solution lacks certain features."
"AWS is really expensive. They provide an awesome service in general, but it's still expensive, very expensive."
"I'd rate the solution at a six out of ten, simply based on the cost. It's very expensive."
"AWS could improve the number of regions. Azure has passed them. The ned more consistency, as far as the Northeast is concerned."
"Some of the security protocols are difficult to understand."
"We had a problem with the schema uploading and setting up the directory when we are migrating our users from on-premises to cloud infrastructure."
"I have opened support tickets and received responses, although not always resolving my queries fully. I would appreciate a live chat option with technical support for quicker resolutions."
"Sometimes it experiences lag, but there's always room for improvement, which is why I deducted one point."
"IAM is challenging to manage in complex environments. Enhancements could include automation tools or a centralized dashboard for managing roles and policies across multiple accounts, simplifying the process."
"The configuration with other tools can be hard."
"For AWS services in general, I had trouble creating an S3 bucket due to a repetitive error message regarding existing names."
"I think AWS IAM Identity Center can be improved by making it beginner-friendly. It was very hard for me to navigate initially because the UI was very complicated."
"Focusing on further allowing customization and flexibility in developing solutions as a solution architect or developer would enhance user experience."
"In the product, two groups cannot have the same name...In general, the tool does not allow for the duplication of names."
 

Pricing and Cost Advice

"The pricing depends because with AWS there are two types of directory objects: 30,000 and 500,000. It varies. AWS provides the pricing calculators so we can get an estimate from there as per the company requirement of how many users and objects that we need to create. So we can go to that portal, put in the data, and get the quotation. There are no extra licensing fees. It's all included."
"We pay an annual subscription fee."
"The pricing is reasonable."
"AWS' pricing is fair, and costs can be cut if you look carefully at when you're using it."
"The product is cheap since it is available on the cloud."
report
Use our free recommendation engine to learn which Identity and Access Management as a Service (IDaaS) (IAMaaS) solutions are best for your needs.
908,800 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
11%
Computer Software Company
10%
Performing Arts
8%
Government
8%
Financial Services Firm
12%
Construction Company
11%
Outsourcing Company
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise3
Large Enterprise5
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise4
Large Enterprise4
 

Questions from the Community

What is your experience regarding pricing and costs for AWS Directory Service?
The pricing is very good because it is low and there is no management cost. You do not need to hire any system administrator to manage your Active Directory.
What needs improvement with AWS Directory Service?
Some features in AWS Directory Service are not automated and are not scriptable, so they require manual work. In today's world where everything is pretty much automated and scriptable using AI, thi...
What advice do you have for others considering AWS Directory Service?
I would like AWS Directory Service to enroll a multi-factor authentication method. I would like to have an SSO federation where users, if we're hosting applications in AWS, would not need to log in...
What is your experience regarding pricing and costs for AWS IAM Identity Center?
AWS provides the lowest pricing among other service providers like Azure, Google, Oracle. It is cost-effective, and they use a pay-as-you-go model.
What needs improvement with AWS IAM Identity Center?
I think AWS IAM Identity Center can be improved by making it beginner-friendly. It was very hard for me to navigate initially because the UI was very complicated. I had to do a lot of research and ...
What is your primary use case for AWS IAM Identity Center?
My main use case for AWS IAM Identity Center is hosting and redirecting web services that I want to use as localhost, but then I have to reroute it. What I did was create a permission set and use i...
 

Also Known As

AWS Managed Microsoft AD
AWS Single Sign On, AWS SSO
 

Overview

 

Sample Customers

Expedia, Intuit, Royal Dutch Shell, Brooks Brothers
Expedia, Intuit, Royal Dutch Shell, Brooks Brothers
Find out what your peers are saying about AWS Directory Service vs. AWS IAM Identity Center and other solutions. Updated: June 2026.
908,800 professionals have used our research since 2012.