AWS Security Cookbook

There's more...

We can also use SAML identity provider configurations in AWS IAM to establish trust between AWS and SAML-compatible identity providers, such as Shibboleth or Microsoft Active Directory Federation Service (ADFS). Steps to set up federated sign-in with ADFS in IAM can be summarized as follows:

1. Download the FederationMetadata.xml file from our ADFS server.
2. Go to the IAM dashboard.
3. Create an identity provider as follows:
   1. Click on Identity providers from the left sidebar.
   2. Click on Create Provider.
   3. For Provider Type, select SAML.
   4. For Provider Name, give a meaningful name.
   5. For Metadata Document, click Choose File and upload the FederationMetadata.xml file we downloaded in step 1.
   6. Click Next Step.
   7. Review and click Create to complete ...