aws-saml-scripts

This repo will contain some scripts to integrate a SAML IDP with an AWS account and enable roles called administrator and readonly. This is only part of a two step process when integrating an AWS account with a SAML provider. The SAML IDP will still need to be configured to release the appropriate attributes and values.

modify shibpolicy.json

change the AWS account number (123456789012) to the actual number

change the value after saml-provider/ to the name you want to call the IDP (a hostname is usually a good practice)

put the IDP metadata in idp.xml (right now, it contains the IDP metdata for login.at.internet.edu, the ICP SAML Proxy)

run the create script:

ICP integration: create_saml_aws.sh login.at.internet2.edu

or: create_saml_aws.sh idp_name