Identity provider (IdP)

wikipedia:Identity provider

• aws cognito-idp admin-create-user
• aws cognito-idp create-identity-provider
• aws iam create-saml-provider

• Type: SAML

Activities

• Set up Google Workspace SSO via SAML for Amazon Web Services
• Read Google doc about setting up SSO with Google as your identity provider using SAML and OIDC https://support.google.com/a/topic/7556794?hl=en&ref_topic=7556686. Google offers a catalog of hundreds of cloud applications with pre-integrated SSO, including Amazon (https://support.google.com/a/answer/6194963) among others.
• Read AWS doc (2016): https://aws.amazon.com/blogs/security/how-to-set-up-federated-single-sign-on-to-aws-using-google-apps/
• 2021 How do I set up Google as a federated identity provider in an Amazon Cognito user pool?
• 2022 How to set up IAM federation using Google Workspace

Related

• SAML: aws iam create-saml-provider
• Okta
• OpenID Connect (OIDC)
• IDP Metadata
• AWS IAM identity provider
• SSO: aws sso
• GitHub Enterprise
• AWS IAM Identity Center
• Your identity source is currently configured as 'External identity provider'. To add new users or edit their attributes, you must do this using your external identity provider (IdP)

See also

• OIDC, kubectl oidc-login, AWS IAM OIDC, EKS OIDC, EKS module, aws iam list-open-id-connect-providers | aws iam create-open-id-connect-provider | aws iam get-open-id-connect-provider, OIDC tokens, aws_lb_listener_rule
• IdP, AWS IAM identity provider, Set up Google Workspace SSO via SAML for Amazon Web Services, OIDC
• SAML, IdP, AWS SAML, AWS IAM, AWS SAML endpoint, SAML:EduPersonOrgDN, SAML Role Attribute, assume-role-with-saml
• Single sign-on: Okta, Red Hat Single Sign-On, Keycloak, SAML, ADFS, Access Management Magic Quadrant, Oracle Access Manager, AWS SSO, Azure Active Directory, Federated authentication, Google Workspace: set up SSO via SAML for Amazon Web Services, Login with, Microsoft account, Shibboleth
• Authentication, AAA, MFA, OpenID, OAuth, OATH, PAM, Personal access token, CWE: Broken Access Control, PAT, Mutual authentication, Federated authentication, IdP, Amazon Cognito, Phone to sign in, Firebase Authentication, Auth0, WebAuthn, Web3auth, Challenge-response, Passwordless authentication, HMAC, HOTP, TOTP, OATH

How do I set up Google as a federated identity provider in an Amazon Cognito user pool?

https://aws.amazon.com/blogs/security/how-to-set-up-federated-single-sign-on-to-aws-using-google-workspace/