You're reading from Implementing Identity Management on AWS A real-world guide to solving customer and workforce IAM challenges in your AWS cloud environments

Product type Paperback

Published in Oct 2021

Publisher Packt

ISBN-13 9781800562288

Length 504 pages

Edition 1st Edition

Tools

AWS

Concepts

Identity Management

Author (1):

Jon Lehtinen

View More author details

Table of Contents (17) Chapters

Preface

1. Section 1: IAM and AWS – Critical Concepts, Definitions, and Tools

2. Chapter 1: An Introduction to IAM and AWS IAM Concepts FREE CHAPTER

3. Chapter 2: An Introduction to the AWS CLI

4. Chapter 3: IAM User Management

5. Chapter 4: Access Management, Policies, and Permissions

6. Chapter 5: Introducing Amazon Cognito

7. Chapter 6: Introduction to AWS Organizations and AWS Single Sign-On

8. Chapter 7: Other AWS Identity Services

9. Section 2: Implementing IAM on AWS for Administrative Use Cases

10. Chapter 8: An Ounce of Prevention – Planning Your Administrative Model

11. Chapter 9: Bringing Your Admins into the AWS Administrative Backplane

12. Chapter 10: Administrative Single Sign-On to the AWS Backplane

13. Section 3: Implementing IAM on AWS for Application Use Cases

14. Chapter 11: Bringing Your Users into AWS

15. Chapter 12: AWS-Hosted Application Single Sign-On Using an Existing Identity Provider

16. Other Books You May Enjoy

Connecting Amazon Cognito to an external IdP – SAML

Now that we have a user pool configured with attributes that match those found in our external IdP, we need to put some users inside it. We do not want users created directly inside the user pool as that would bypass the external IdP as the authoritative source of identity information for our users. To connect the external IdP with the user pool, we will need to configure our external IdP as an IdP for the user pool, as follows:

From the user pool, we can select the type of federated provider we want to add under the Federation menu. We will select the SAML option, as illustrated in the following screenshot:
Figure 12.7 – Selecting a new IdP for the user pool
The configuration options are very sparse since it wants to import a metadata file. We will come back to the form shown in the following screenshot since we will need to build this connection on the external IdP side in order to create that metadata file...