zunh0 (zunh0) asked a question.
AWS Error: Specified provider doesn't exist
I've successfully tested OCC with AWS and a single AWS account. However, after following the setup instructions to reconfigure OCC to work with AWS across multiple accounts, any attempt to select a role on AWS results in this error: Specified provider doesn't exist (Service: AWSOpenIdDiscoveryService; Status Code: 400; Error Code: AuthSamlManifestNotFoundException; Request ID: 4de41592-e186-11e7-baa5-17bd1328b919) (Service: AWSSecurityTokenService; Status Code: 400; Error Code: InvalidIdentityToken; Request ID: 4de3c7de-e186-11e7-af96-255bc4cc42a8). Please try again. OCC is successfully fetching the roles from all accounts and I've configured my OCC account to be able to select different roles from different accounts. However, it doesn't matter which role I pick, I get the same error. What isn't clear in the documentation is how the trust policy in each role should be configured in a multi-account scenario. It isn't clear if I should be using the ARN for the master account IDP or the ARN for the IDP in that specific account. I've actually tested both ARNs and neither works. I'm completely stuck as to what has gone wrong here.
