Skip to content

Commit

Permalink
attribute table consistency changes
Browse files Browse the repository at this point in the history
  • Loading branch information
ccestes authored and drothery-edb committed Jun 7, 2022
1 parent 466c133 commit 0e41637
Showing 1 changed file with 12 additions and 22 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -35,28 +35,18 @@ description: "Using AWS SSO as your identity provider for your Azure account"

1. Select **Save changes** at the bottom of the AWS page.
1. Go to your newly-created application (appearing under its display name) and select the **Attribute mappings** tab.
1. Add your desired attributes:
1. Enter BigAnimal attributes under **User attribute in the application**.

| Attributes in BigAnimal |
| -------------------------------------------------------------------- |
| http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname |
| http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname |
| http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name |
| http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier |
| http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress |

2. Enter the corresponding AWS SSO attributes under **Maps to this string value or user attribute in AWS SSO**.

| Supported AWS SSO attributes |
| ---------------------------- |
| ${user:givenName} |
| ${user:familyName} |
| ${user:name} |
| ${user:preferredUsername} |
| ${user:email} |

3. Choose an appropriate **Format** for each attribute (for example: emailAddress).
1. Enter your desired attribute configuration. We reccomend the following:

| User attribute in the application | Maps to this string value or user attribute in AWS SSO | Format |
| --------------------------------- | ------------------------------------------------------ | ------------ |
| Subject | ${user:email} | emailAddress |
| <assertion_path>/givenname | ${user:givenName} | basic |
| <assertion_path>/surname | ${user:familyName} | basic |
| <assertion_path>/name | ${user:preferredUsername} | basic |
| <assertion_path>/nameidentifier | ${user:name} | basic |
| <assertion_path>/emailaddress | ${user:email} | basic |

Where <assertion_path> is http://schemas.xmlsoap.org/ws/2005/05/identity/claims.
1. Go to the **Assigned users** tab and select the **Assign users** button to allow users access to the application.
1. Go to the **Configuration** tab and scroll down to the **AWS SSO metadata** section.
1. Copy the **AWS SSO sign-in URL**.
Expand Down

0 comments on commit 0e41637

Please sign in to comment.