JasonS.96119 (Customer) asked a question.
Okta and AWS government account SAML applications
I am trying to setup authentication through Okta for a government account in AWS. I see two options in the App Integration Catalog, AWS Single Sign-On and AWS Account federation. The outcome I want to accomplish is to create groups in Okta and then assign permissions to various resources in AWS.
If I use AWS account federation app, it appears that permissions are limited to one role assignment and doesn't leverage group membership.
If I try to use AWS Single Sign-On, AWS SSO is a dependency to use the app and SSO is not available in government accounts.
Is what I am attempting to accomplish possible?
Hi Jason,
I think the best approach here would be to use AWS Account federation and sent the Group Membership in the SAML assertion using Group Statements option ( as described in here: https://help.okta.com/en/prod/Content/Topics/Apps/Apps_App_Integration_Wizard_SAML.htm ).
I would strongly recommend raising a support case with us since we would probably jump on a meeting since this topic is complex and cannot be covered in one single answer.
Wish you the best,
Andreea Pomirleanu