All Products
Search
Document Center

CloudSSO:Limitations

Last Updated:Nov 24, 2025

This topic describes the resource quotas of CloudSSO.

Item

Upper limit

Adjustable

The number of CloudSSO directories in a management account

1

No.

The number of CloudSSO directories in a region

1

No.

The number of users in a CloudSSO directory

1,000

Yes, go to Quota Center to apply for a quota.

The number of groups in a CloudSSO directory

500

Yes, go to Quota Center to apply for a quota.

The number of users that can be added to a group

1,000

No.

The number of groups to which a user can be added

500

No.

The number of multi-factor authentication (MFA) devices that can be bound to a user

2

No.

The number of external identity providers (IdPs) that can be configured in a CloudSSO directory

1

No.

The number of certificates in the metadata file of an external IdP

2

No.

The length of the metadata file of an external IdP in Base64

100,000

No.

The number of System for Cross-domain Identity Management (SCIM) credentials within a CloudSSO directory

2

No.

The number of access configurations that can be created within a CloudSSO directory

1,000

Yes, go to Quota Center to apply for a quota.

The number of system policies that can be configured for an access configuration

20

Yes, go to Quota Center to apply for a quota.

The number of inline policies that can be configured for an access configuration

1

Yes, go to Quota Center to apply for a quota.

The number of access configurations that can be provisioned for an account in a resource directory

1,000

No.

The number of access configurations that can be specified for a user

50

Yes, go to Quota Center to apply for a quota.

The number of access configurations that can be specified for a group

10

Yes, go to Quota Center to apply for a quota.

The number of characters that can be contained in the policy document of an inline policy

6,144

No.