IAM Identity Center – Google Workspace doesn't work as identity source

Question

I set everything up following [this](https://aws.amazon.com/ru/blogs/security/how-to-use-g-suite-as-external-identity-provider-aws-sso/) guide.
When I try to login using AWS access portal URL the following happens
1. I get redirected to Google
2. I select my account (that I have manually added as a user)
3. I get an error:

> Something went wrong
> Looks like this code isn't right. Please try again.

Any pointers are much appreciated

Answer

Hi! I was struggling with the same problem. For me, I had to ensure that the username of the user was the same as the email of the user in the google admin panel. My user was named 'jane' instead of 'jane@example.com', which caused SSO to fail, despite that user's email being jane@example.com

Answer

Did you check the CloudTrail logs to check if you see any errors related to "ExternalIdPDirectoryLogin"

IAM Identity Center – Google Workspace doesn't work as identity source

Relevanter Inhalt