CODEWITHSUNDEEP
amazon-web-servicessingle-sign-onazure-active-directorysaml
PradeeeP ST
PradeeeP ST

Reputation: 11

Create SSO for AWS from Azure AD

Trying to create SSO for AWS keeping Azure users as source of Truth. Followed below Tut's.

  1. https://learn.microsoft.com/en-us/azure/active-directory/active-directory-saas-amazon-web-service-tutorial
  2. http://blog.flux7.com/aws-best-practice-azure-ad-saml-authentication-configuration-for-aws-console

Anything is to be more precise with user attributes in Azure ? Has anything to enable in AWS to accept the SSO ?

Login is successful(Can see signin's in Azure AD) but it displays message "Your request included an invalid SAML response. To logout, click here ". Any idea what has gone wrong ? screenshot of error

Upvotes: 1

Views: 1914

Answers (2)

Pravin Mishra
Pravin Mishra

Reputation: 8434

May be I am late to this post. As Jeevan mentioned. You are missing custom attributes that you need to add. I have been struggling with same and found this well explained video. I hope, this will help any one who is struggling with this issues.

Upvotes: 0

Jeevan Desarda
Jeevan Desarda

Reputation: 71

Yes, I think you are on the right path. It seems that you are missing the custom attributes which we are suggesting to add for your application. Those are Role and RoleSessionName. Please see the step #5 in my article https://learn.microsoft.com/en-us/azure/active-directory/active-directory-saas-amazon-web-service-tutorial and make sure that you use the same casing and namespace for the claims. With that the integration should work correctly.

Upvotes: 1

Related Questions