This is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::Grafana::Workspace SamlConfiguration
<a name="aws-properties-grafana-workspace-samlconfiguration"></a>

A structure containing information about how this workspace works with SAML. 

## Syntax
<a name="aws-properties-grafana-workspace-samlconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-grafana-workspace-samlconfiguration-syntax.json"></a>

```
{
  "[AllowedOrganizations](#cfn-grafana-workspace-samlconfiguration-allowedorganizations)" : {{[ String, ... ]}},
  "[AssertionAttributes](#cfn-grafana-workspace-samlconfiguration-assertionattributes)" : {{AssertionAttributes}},
  "[IdpMetadata](#cfn-grafana-workspace-samlconfiguration-idpmetadata)" : {{IdpMetadata}},
  "[LoginValidityDuration](#cfn-grafana-workspace-samlconfiguration-loginvalidityduration)" : {{Number}},
  "[RoleValues](#cfn-grafana-workspace-samlconfiguration-rolevalues)" : {{RoleValues}}
}
```

### YAML
<a name="aws-properties-grafana-workspace-samlconfiguration-syntax.yaml"></a>

```
  [AllowedOrganizations](#cfn-grafana-workspace-samlconfiguration-allowedorganizations): {{
    - String}}
  [AssertionAttributes](#cfn-grafana-workspace-samlconfiguration-assertionattributes): {{
    AssertionAttributes}}
  [IdpMetadata](#cfn-grafana-workspace-samlconfiguration-idpmetadata): {{
    IdpMetadata}}
  [LoginValidityDuration](#cfn-grafana-workspace-samlconfiguration-loginvalidityduration): {{Number}}
  [RoleValues](#cfn-grafana-workspace-samlconfiguration-rolevalues): {{
    RoleValues}}
```

## Properties
<a name="aws-properties-grafana-workspace-samlconfiguration-properties"></a>

`AllowedOrganizations`  <a name="cfn-grafana-workspace-samlconfiguration-allowedorganizations"></a>
Lists which organizations defined in the SAML assertion are allowed to use the Amazon Managed Grafana workspace. If this is empty, all organizations in the assertion attribute have access.  
*Required*: No  
*Type*: Array of String  
*Minimum*: `1`  
*Maximum*: `256`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`AssertionAttributes`  <a name="cfn-grafana-workspace-samlconfiguration-assertionattributes"></a>
A structure that defines which attributes in the SAML assertion are to be used to define information about the users authenticated by that IdP to use the workspace.  
*Required*: No  
*Type*: [AssertionAttributes](aws-properties-grafana-workspace-assertionattributes.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`IdpMetadata`  <a name="cfn-grafana-workspace-samlconfiguration-idpmetadata"></a>
A structure containing the identity provider (IdP) metadata used to integrate the identity provider with this workspace.  
*Required*: Yes  
*Type*: [IdpMetadata](aws-properties-grafana-workspace-idpmetadata.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`LoginValidityDuration`  <a name="cfn-grafana-workspace-samlconfiguration-loginvalidityduration"></a>
How long a sign-on session by a SAML user is valid, before the user has to sign on again.  
*Required*: No  
*Type*: Number  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`RoleValues`  <a name="cfn-grafana-workspace-samlconfiguration-rolevalues"></a>
A structure containing arrays that map group names in the SAML assertion to the Grafana `Admin` and `Editor` roles in the workspace.  
*Required*: No  
*Type*: [RoleValues](aws-properties-grafana-workspace-rolevalues.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)