AWS VPN Client - how does it open a browser for SSO ?

Question

I would like to get the AWS VPN client working on a non ubuntu/debian based linux. The main issue seems to be opening the default browser for authentication. I would like to know what mechanism is used to open the default browser. Hitting [Connect] on my setup causes an "Unknown error ocurred, Try Again." message. Does it call an external binary like "open" or something else ?

Answer

1. The user opens the AWS-provided VPN client on their device and initiates a connection to the Client VPN endpoint.
2. The Client VPN endpoint sends an IdP URL and authentication request back to the client, based on the information that was provided in the IAM SAML provider.
3. The AWS provided VPN client opens a new browser window on the user’s device. The browser makes a request to the IdP and displays a sign-in page.

Reference-  https://aws.amazon.com/blogs/security/authenticate-aws-client-vpn-users-with-aws-single-sign-on/

For granular troubleshooting, we require details that are non-public information. Therefore, kindly open a support case with AWS using the following https://console.aws.amazon.com/support/home#/case/create

AWS VPN Client - how does it open a browser for SSO ?

Contenido relevante