AWS Single Sign-On (SSO) also manages access to AWS services and resources. The difference between AWS IAM and AWS SSO is that the latter manages access for all AWS accounts within an AWS Organization, as well as access to other cloud applications, e.g., Salesforce.