3 ms·
Update: I realize now this is Amazon offering SSO services, not just supporting SAML / Federated authentication. Ignore rest of my comment: Proof you can bu
by davidu 9y ago
Update: I realize now this is Amazon offering SSO services, not just supporting SAML / Federated authentication.
Ignore rest of my comment:
Proof you can build a massive, multi-billion dollar enterprise business without supporting SSO.
I would not have immediately guessed that statement to be true, and I would have thought AWS already had SSO support.
- mrkurt 9y agoIt helps if you have a massive, multi billion dollar consumer business everyone's already registered with.
- BillinghamJ 9y agoIt was always pretty easy to build yourself with their federated auth system. Nice to have proper support now though. Edit: no, it still isn’t really anything like what I’m wanting. This particular product requires Microsoft AD. I just want our admins to be able to log into AWS via google apps. :(
- will_hughes 9y agoYou should be able to do this already[1]. What issues are you having? [1] https://support.google.com/a/answer/6194963 https://support.google.com/a/answer/6194963 via http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_saml_3rd-party.html http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_pro...
- BillinghamJ 9y agoThank you very much for those links. After a couple of hours of messing around I have managed to get that working well. :)
- toddgower 9y agoI want the ability to use Google/G-Suite as an identity provider to log into multiple AWS accounts. We have dev and prod workloads that run in completely separate AWS accounts. I want to be able to use Google SSO and the ability to select which AWS account to log into
- will_hughes 9y agoI don't have access to a G-Suite account to test this with, but afaict you should be able to do this by just adding each AWS account in turn and giving it a different Application Name and description in the G-Suite interface.