Configuring SSO with an external IDP

Question

I am using jumpcloud as my IDP for my users and I followed all steps to configure and establish trust between AWS and jumpcloud. However, when clicking on the user portal link i get this error message (attached). Is this a misconfiguration on my end? Steps I followed are below.

JUMPCLOUD-AWS SSO Steps [https://support.jumpcloud.com/support/s/article/Configuring-Dynamic-AWS-Roles-in-JumpCloud-Using-Custom-User-Attributes] ERROR

JUMPCLOUD-AWS SSO Steps
[https://support.jumpcloud.com/support/s/article/Configuring-Dynamic-AWS-Roles-in-JumpCloud-Using-Custom-User-Attributes]
![ERROR](/media/postImages/original/IMGyfGdiXFQuiA8m1Bewvm0g)

Answer

I have raised a ticket over 5 days ago and no one has contacted me. Where how else can i get support with this issue?

Answer

Hello,

I hope you're doing well.

Thank you for reaching out to us with your concern.

Usually this error is observed in the following scenarios: 
   i. Skewed time on the user's local machine will cause an issue logging into SSO.
   ii. The nameID format included in the SAML response does not have an email address or it does not match the corresponding user email stored in AWS SSO.

As we have only limited information, we can't find the actual cause of the issue. Sorry for the inconvience caused.

To troubleshoot further, I would request you raise a support case ticket, where we can go deep dive into the issue to find out the actual root cause.

Configuring SSO with an external IDP

Contenuto pertinente