This is version 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 . It is not the current version, and thus it cannot be edited.
[Back to current version]   [Restore this version]

Amazon supports custom SAML 2.0 applications. See https://docs.aws.amazon.com/singlesignon/latest/userguide/samlapps.html

1. Amazon SSO SAML 2.0 Configurations:#

Open the IAM Identity Center Console https://console.aws.amazon.com/singlesignon and create a new custom application.


Configure the name, Application ACS URL, and SAML Audience, then submit the application.

Application ACS URL example:
https://your.crushftp.com/?u=SSO_SAML&p=none

SAML Audience example:
https://your.crushftp.com/?u=SSO_SAML&p=none

Configure the attribute mappings of your application.



Add new attribute mapping.

Maps to this string value or user attribute in IAM Identity Center:
${user:subject}

Warning: Assign users/groups to the created application!

2. SAMLSSO plugin configuration
#

Download the IAM Identity Center SAML metadata file.

[Amazon SSO SAML 2.0 Configuration]                                      [CrushFTP settings] 

entityID value of IAM Identity Center SAML metadata XML file      ->     SAML Provider URL (EntityID)

Application SAML audience                                         ->     SAML Audience

SingleSignOnService SAML:2.0:bindings:HTTP-POST Location value 
of IAM Identity Center SAML metadata XML file.                   ->      IDP Redirect URL (HTTP-POST)

IAM Identity Center SAML issuer URL                              ->      SAML Issuer

Base64 encoded PEM Signing certificate ->         X509Certificate value of IAM Identity Center SAML metadata XML file