Identity provider (IdP)

wikipedia:Identity provider

• Google Cloud Identity
• AWS IAM identity provider

• aws cognito-idp admin-create-user
• aws cognito-idp create-identity-provider
• aws iam create-saml-provider

• Type: SAML

Activities

• Set up Google Workspace SSO via SAML for Amazon Web Services
• Read Google doc about setting up SSO with Google as your identity provider using SAML and OIDC https://support.google.com/a/topic/7556794?hl=en&ref_topic=7556686. Google offers a catalog of hundreds of cloud applications with pre-integrated SSO, including Amazon (https://support.google.com/a/answer/6194963) among others.
• Read AWS doc (2016): https://aws.amazon.com/blogs/security/how-to-set-up-federated-single-sign-on-to-aws-using-google-apps/
• 2021 How do I set up Google as a federated identity provider in an Amazon Cognito user pool?
• 2022 How to set up IAM federation using Google Workspace
• Keycloak and Okta Integration: Complete Developer Guide (Gemini Terraform code: Okta Keycloak integration)

Related

• SAML: aws iam create-saml-provider
• Okta
• OpenID Connect (OIDC)
• IDP Metadata
• SSO: aws sso
• GitHub Enterprise
• AWS IAM Identity Center
• Your identity source is currently configured as 'External identity provider'. To add new users or edit their attributes, you must do this using your external identity provider (IdP)
• AWS Identity providers and federation
• EntraID
• Keycloak OpenID Connect

See also

• IdP, AWS IAM identity provider, Set up Google Workspace SSO via SAML for Amazon Web Services, OIDC, Authentik, mappers, Dexidp.io, Keycloak IdentityProviders, Relying Party (RP)
• Relying Party (RP), Keycloak Relying Party (RP), IdP

How do I set up Google as a federated identity provider in an Amazon Cognito user pool?

https://aws.amazon.com/blogs/security/how-to-set-up-federated-single-sign-on-to-aws-using-google-workspace/