-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
1 changed file
with
13 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,2 +1,14 @@ | ||
| # aws-saml-scripts | ||
| Contains some scripts to integrate a SAML IDP with an AWS account and enable roles called administrator and readonly | ||
| This repo will contain some scripts to integrate a SAML IDP with an AWS account and enable roles called administrator and readonly. | ||
| This is only part of a two step process when integrating an AWS account with a SAML provider. The SAML IDP will still need to | ||
| be configured to release the appropriate attributes and values. | ||
|
|
||
|
|
||
| # modify shibpolicy.json | ||
| ## change the AWS account number (123456789012) to the actual number | ||
| ## change the value after saml-provider/ to the name you want to call the IDP (a hostname is usually a good practice) | ||
| # put the IDP metadata in idp.xml (right now, it contains the IDP metdata for login.at.internet.edu, the ICP SAML Proxy) | ||
| # run the create script: | ||
| ## ICP integration: create_saml_aws.sh login.at.internet2.edu | ||
| ## or: create_saml_aws.sh idp_name | ||
|
|