AWS CLI WORKSPACES HOW TO
AWS CLI WORKSPACES DOWNLOAD

Select Users from the sidebar of the AWS SSO overview page and then choose Add user.Your configuration is completed! Now click Return to settings.Type CONFIRM and click Change identity source to complete the setup.Choose Browse… on the configuration page and select this file from your computer and click Next: Review button. SO you have done the Google Workspace (G Suite) setup and you downloaded the GoogleIDPMetadata.xml file.Return to the other browser tab with the AWS SSO configuration and complete the SSO setup.Īdd identity provider metadata in AWS SSO You’re done configuring AWS SSO in Google Workspace (G Suite). Note: If you want to manage access for particular users you can do this via organizational units (for example, you can enable the AWS SSO application for your engineering department). But this doesn’t give access to any resources inside of your AWS accounts. select ON for everyone and choose SAVE.Ĭongratulations! You have now enabled the application for all your users.On the application page, in the User access section, select the down arrow to expand the section. On the Attribute mapping screen, leave the default settings and choose FINISH. For Name ID, choose Basic Information > Primary email.For Entity ID, enter the AWS SSO Issue URL.For ACS URL, enter the AWS SSO ACS URL.Using the data from AWS SSO you noted, provide information in the Service provider details, and then choose CONTINUE.This will downloads an XML file named GoogleIDPMetadata.xml, which you will use to configure Google Workspace (G Suite) as the IdP in AWS SSO.

AWS CLI WORKSPACES DOWNLOAD

To download the Google IdP metadata, under Option 1: Download IdP metadata, choose DOWNLOAD METADATA, and then choose CONTINUE. To configure the name of the application, in the App details section, under App name, enter AWS SSO (or any other name you want), and then choose CONTINUE.

Open your Google Admin console in a new browser tab, navigate to the Web and mobile apps section, select Add App, and then select Add custom SAML app.

Google Workspace (G Suite) SAML application setup Now one a new tab and follow the bellow step for IdP SAML metadata* to complete the SSO setup. Note down the AWS SSO SAML metadata information to configure the a custom SAML application in Google Workspace (G Suite)įor the next steps, you need to switch to your Google AdminĬonsole and use the service provider metadata information to configure AWS SSO as a custom SAML application. Choose Show individual metadata values to show the information you need to configure a custom SAML application.

Choosing the External identity provider option reveals additional information needed to configure it.

Select External identity provider from the available identity sources. To use Google Workspace (G Suite) as your identity provider, you have to switch to an external identity provider.

By default, AWS SSO uses its own directory (AWS SSO) as the identity provider.

Select the Settings, from the Identity source select Change.

You will see You seccessfully enabled AWS SSO message.

Setup an external identity provider in AWS SSO

You need to have management (root) account access of the Organizations with administrator privileges.

AWS CLI WORKSPACES HOW TO

If not setup yet please follw this ( How to setup AWS Organizations) You need to have setup AWS Organizations with All features set to enabled. You need to be a super administrator privileges in Google Workspace (G Suite) and need to have access to the Google Admin console.

The user entity in AWS SSO allows you to grant a Google Workspace (G Suite) user access to AWS accounts and define its permissions in those accounts. Which maps a Google Workspace (G Suite) user via its primary email address as the username to the user acccount in AWS SSO. The user entity will not be a user account, but it will be a logical object. When you will use Google Workspace (G Suite) to authenticate and manage your users, you will have to create a user in your AWS SSO. If your organization useing Google Workspace (formerly G Suite) and AWS then you can connect AWS SSO to Google Workspace (G Suite) allowing your users to access AWS accounts with their Google Workspace (G Suite) credentials.

Aws cli workspaces