Passer au contenu
En utilisant AWS re:Post, vous acceptez les AWS re:Post Conditions d’utilisation
AWS re:Postre:Post
À propos de re:Post

How to Enforce 2FA for AWS IAM Identity Center with Google Workspace as an External IdP

0

I have configured Google Workspace as an external identity provider for AWS IAM Identity Center. In Google Workspace, I have enforced mandatory 2FA for all users, and they have successfully set it up. However, when my users sign in to AWS, the CloudTrail logs show that 2FA = false for their sessions.Is there a way to configure AWS to recognize Google Workspace’s 2FA? Alternatively, how can I set up additional 2FA requirements directly in AWS to ensure secure access if needed?

Sujets
Sécurité, identité et conformité
Balises
Centre d’identité IAM AWSAWS Identity and Access Management
Langue
English

demandé il y a 2 ans406 vues

1 réponse
1

Because you are using an external identity provider, you rely on your IDP to enforce MFA. AWS Just uses your IDP to ensure your users are authenticated. Cloudtrail will never see that your users have authenticated with MFA as that is external to AWS. You can only enforce MFA with Identity centre if you use AWS authentication

You can configure MFA capabilities in IAM Identity Center when your identity source is configured with IAM Identity Center’s identity store, AWS Managed Microsoft AD, or AD Connector. MFA in IAM Identity Center is currently not supported for external identity providers.

https://docs.aws.amazon.com/singlesignon/latest/userguide/mfa-configure.html

EXPERT

répondu il y a 2 ans

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Contenus pertinents