AWS Builder Center is the official home for builders on AWS. Share and read what others are working on, follow people who inspire you, explore training and workshops, and find tools to support what you're building.
Can't select "custom SAML 2.0 application" to add application at the IAM Identity Center
I want to add a custom application. I followed the guide (https://docs.aws.amazon.com/singlesignon/latest/userguide/customermanagedapps-set-up-your-own-app-saml2.html) to set it up, but I couldn’t get the steps as shown in the guide. When I choose the 'Customer managed' tab and click 'Add application,' the screen that appears isn’t what I expected.
My account is a management account, and it already has AdministratorAccess permissions. I’d like to ask for everyone’s help. Thank you!
- Newest
- Most votes
- Most comments
The issue you're experiencing is likely related to the type of IAM Identity Center instance you've created. There are two types of IAM Identity Center instances: organization-level and account-level.
Based on the information provided, it appears you may have created an account-level IAM Identity Center instance, which has limited functionality compared to the organization-level instance. Account-level instances are typically used for testing purposes and do not support adding custom applications.
To resolve this issue and access the full functionality described in the AWS documentation, including the ability to add custom SAML 2.0 applications, you should use an organization-level IAM Identity Center instance. Here's what you can do:
- Delete your current IAM Identity Center instance.
- Create a new IAM Identity Center instance, ensuring you select the organization-level option when prompted during setup.
- Once the organization-level instance is set up, you should be able to follow the steps in the AWS documentation to add a custom SAML 2.0 application.
After setting up the organization-level instance, you should see the expected options when adding an application, including "I have an application I want to set up" and the ability to choose SAML 2.0 as the application type.
Remember that the organization-level IAM Identity Center provides the full range of features and is the recommended setup for production environments. This should allow you to properly configure custom SAML 2.0 applications as described in the AWS documentation.
Sources
Can't add an Application to the IAM Identity Center | AWS re:Post
Authenticate VPN with IAM Identity Center | AWS re:Post
Set up your own SAML 2.0 application - AWS IAM Identity Center
answered a year ago
Relevant content
asked 3 years ago
