AWS Account Federation OIN SAML App Does Not Support SP-Initiated Login
Jun 6, 2025
Single Sign-On
Okta Classic Engine
Okta Identity Engine
Overview
This article clarifies whether or not the OIN SAML application AWS Account Federation supports SP-Initiated Login.
Applies To
- AWS Account Federation
- Okta Integration Network (OIN)
- Secure Assertion Markup Language (SAML)
- Single Sign-On (SSO)
- SP Flow
Solution
As mentioned in the document How to Configure SAML 2.0 for AWS Account Federation, the SAML integration currently only supports IdP-initiated SSO. This means users can only access the app by clicking on it from their Okta Dashboard or using the App embed link (which can be obtained from the App General tab).
SP-initiated login is not supported by this integration.
