A company uses AWS Organizations to manage its AWS accounts.

[Reference: AWS documentation on IAM Identity Center and SAML Federation., This corresponds to Option B: Use AWS IAM Identity Center to configure identity federation with SAML 2.0.,  Step 2: Creating an SCP to Deny Password Logins for IAM UsersTo enforce that IAM users do not create passwords or access the Management Console directly without going through the corporate IdP, you can create a Service Control Policy (SCP) in AWS Organizations that denies password creation for IAM users., Action: Create an SCP that denies password creation for IAM users., Why: This ensures that users cannot set passwords for their IAM user accounts, forcing them to use federated access through the corporate IdP for console login., Reference: AWS documentation on Service Control Policies., This corresponds to Option E: Create an SCP in Organizations to deny password creation for IAM users., , , , ]