View a markdown version of this page

Update the SAML application configuration - Innovation Sandbox on AWS

Update the SAML application configuration

After deploying the Data stack, update the SAML 2.0 application you created earlier with the actual ACS URL and audience values from the Data stack outputs.

  1. Sign in to the AWS CloudFormation console in the Hub account.

  2. Choose the Data stack, and then choose the Outputs tab.

  3. Note the values for CognitoAcsUrl and CognitoAudience.

  4. Sign in to the AWS IAM Identity Center console in the account where IAM Identity Center is configured.

  5. From the left pane, under Application assignments, choose Applications.

  6. On the Applications page, on the Customer managed tab, choose the SAML application you created in Create a SAML 2.0 application.

  7. Choose Actions, then choose Edit configuration.

  8. Under Application metadata, update the following fields:

    Field Value

    Application ACS URL

    The CognitoAcsUrl value from the Data stack outputs (for example, https://<namespace>-isb.auth.<region>.amazoncognito.com/saml2/idpresponse)

    Application SAML audience

    The CognitoAudience value from the Data stack outputs (for example, urn:amazon:cognito:sp:<user-pool-id>)

  9. Choose Submit to save the updated configuration.

Important

If these values do not match the Data stack outputs, users will receive a SAML assertion audience mismatch error when attempting to sign in to the web application.