Documentation for AWS SSO Authentication

[gw-bcharboneau]

Would it be possible to get documentation and examples of how to use this extension when using AWS SSO federated login?

[tilfin]

Basically, your configuration does not change depending on how you log in.

[arnvid]

@gw-bcharboneau - with SSO I have seen that in some cases using account_id as numerical would work outside SSO, but not with SSO login

[tlzdevorg] aws_account_id = ###########

vs

[tlzdevorg] aws_account_id = tlz-dev-mpa-x

[yongzhang]

I also don't know how to config it for aws sso

[nikskiz]

Trying to figure this out with SSO? Documentation would be nice :)

[heikkis]

The documentation says that add only the name of permission set as role_name and define aws_account_id. However I was not able get this work still.

[ssotestprofile]
aws_account_id = 1234567890
role_name = PermissionSetName
color = 330029

When the top right corner shows AWSReservedSSO_PermissionSetName_abcdefghijkl/username .

@tilfin can you point me what I missed?

[aMfM9E2]

or is it possible support to switch by sso landing account X_X like, SSO -> landing account -> workload account

[dennisvandehoef]

Heey, so we use LastPass Apps as an SSO provider (I don't know if this is different from other SSO providers on an AWS side).

The following config works for me, maybe it helps you:

[production]
role_arn       = arn:aws:iam::1234567890:role/RoleName
color          = ff1a1a

[staging]
role_arn       = arn:aws:iam::1234567890:role/RoleName
color          = 80c8f5

[development]
role_arn       = arn:aws:iam::1234567890:role/RoleName
color          = 4fdf11

[yongzhang]

The documentation says that add only the name of permission set as role_name and define aws_account_id. However I was not able get this work still.

[ssotestprofile]
aws_account_id = 1234567890
role_name = PermissionSetName
color = 330029

When the top right corner shows AWSReservedSSO_PermissionSetName_abcdefghijkl/username .

@tilfin can you point me what I missed?

Same here.