mirrors
/
authentik
mirror of https://github.com/goauthentik/authentik.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
authentik/docs/integrations/services/aws/index.md

1.3 KiB
Raw Blame History

Amazon Web Services Integration

What is AWS

!!! note "" Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform, offering over 175 fully featured services from data centers globally. Millions of customers—including the fastest-growing startups, largest enterprises, and leading government agencies—are using AWS to lower costs, become more agile, and innovate faster.

Preparation

The following placeholders will be used:

  • passbook.company is the FQDN of the passbook install.

Create an application in passbook and note the slug, as this will be used later. Create a SAML provider with the following parameters:

  • ACS URL: https://signin.aws.amazon.com/saml
  • Audience: urn:amazon:webservices
  • Issuer: passbook
  • Binding: Post

You can of course use a custom signing certificate, and adjust durations.

AWS

Create a role with the permissions you desire, and note the ARN.

AWS requires two custom PropertyMappings; Role and RoleSessionName. Create them as following:

Afterwards export the metadata from passbook, and create an Identity Provider here.