:doc:`IAM <../../iam>` / Client / enable_outbound_web_identity_federation

***************************************
enable_outbound_web_identity_federation
***************************************



.. py:method:: IAM.Client.enable_outbound_web_identity_federation()

  

  Enables the outbound identity federation feature for your Amazon Web Services account. When enabled, IAM principals in your account can use the ``GetWebIdentityToken`` API to obtain JSON Web Tokens (JWTs) for secure authentication with external services. This operation also generates a unique issuer URL for your Amazon Web Services account.

  

  See also: `AWS API Documentation <https://docs.aws.amazon.com/goto/WebAPI/iam-2010-05-08/EnableOutboundWebIdentityFederation>`_  


  **Request Syntax**

  ::

    response = client.enable_outbound_web_identity_federation()
  :rtype: dict
  :returns: 
    
    **Response Syntax**

    
    ::

      {
          'IssuerIdentifier': 'string'
      }
      
    **Response Structure**

    

    - *(dict) --* 
      

      - **IssuerIdentifier** *(string) --* 

        A unique issuer URL for your Amazon Web Services account that hosts the OpenID Connect (OIDC) discovery endpoints at ``/.well-known/openid-configuration and /.well-known/jwks.json``. The OpenID Connect (OIDC) discovery endpoints contain verification keys and metadata necessary for token verification.

        
  
  **Exceptions**
  
  *   :py:class:`IAM.Client.exceptions.FeatureEnabledException`

  