Difference between revisions of "SAML:EduPersonOrgDN"

From wikieduonline
Jump to navigation Jump to search
Line 14: Line 14:
 
   }]
 
   }]
 
  }
 
  }
 +
 +
== Related ==
 +
* <code>[[AssumeRolePolicyDocument]]</code>
  
 
== See also ==
 
== See also ==
 
* {{LDAP}}
 
* {{LDAP}}

Revision as of 14:50, 2 November 2021

https://iam.uconn.edu/supported-ldap-attributes/

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-saml.html

{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Allow",
    "Principal": {"Federated": "arn:aws:iam::account-id:saml-provider/ExampleOrgSSOProvider"},
    "Action": "sts:AssumeRoleWithSAML",
    "Condition": {"StringEquals": {
      "saml:edupersonorgdn": "ExampleOrg",
      "saml:aud": "https://signin.aws.amazon.com/saml"
    }}
  }]
}

Related

See also

Advertising: