Skip to main content

Map application attributes

In this step, you map application attributes to the user attribute in IAM Identity Center, using the email address for authentication.

  • From the list of applications, choose the SAML application we set up in the previous step.
  • Under Actions, select Edit attribute mappings.
  • Under the User attribute in the application section, enter the following values corresponding to the Subject.
    • For Maps to this string value or user attribute in IAM Identity Center, use ${user:email}.
    • For Format, use emailAddress.
  • Choose Save Changes.
Save application configuration values

Note: This section provides guidance on how to access and save the configuration values for the SAML2.0 application you created in the previous steps. We recommend you save these values, as you will need to use this for the AppConfig configuration in the Hub account.  You can also log in to the AWS IAM Identity Center to retrieve these values. 

  • From the list of applications, choose the SAML application set up in the previous step.
  • Under Actions, select Edit configuration. The Application details display.
  • Save the following values.

 

Parameter name Where can you find this

idpSignInUrl

IAM Identity Center metadata > IAM Identity Center sign-in URL

idpSignOutUrl

IAM Identity Center metadata > IAM Identity Center sign-out URL

webAppUrl

Application metadata > Application ACS URL without the api/auth/login/callback

idpAudience

Application metadata > Application SAML audience

awsAccessPortalUrl

IAM Identity Center > AWS access portal URL

Certificate (download)

IAM Identity Center > IAM Identity Center Certificate

No comments to display

Back to top