Institutional Shibboleth IdP with Amazon Web Services SP?

[Bryan E. Wooten]

Hi all,

We too just got hit with a request for AWS integration.

We are a bit concerned about the required attributes. Specifically RoleEntitlement and RoleSessionName.

How did anyone map these?

All the eduPerson attributes are "not required".

Thanks,

Bryan

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of David Bantz
Sent: Tuesday, July 01, 2014 6:48 PM
To: Shib Users
Subject: Institutional Shibboleth IdP with Amazon Web Services SP?

I've been asked whether our IdP can readily support AWS logins as outlined in:
http://docs.aws.amazon.com/STS/latest/UsingSTS/STSMgmtConsole-SAML.html and
http://blogs.aws.amazon.com/security/post/TxRTTT5PLUE6B5/How-to-use-Shibboleth-for-single-sign-on-to-the-AWS-Management-Console

A quick read gave me the impression it should almost straightforward, but I would appreciate hearing from other institutions with generic Shibboleth IdP (i.e., not hosted at AWS) that have succeeded (or failed!) providing institutional authN/attributes to AWS service via institutional IdP.

Anyone trying to get them in InC?

David Bantz
U Alaska
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140804/1cec5883/attachment.html