AWS VPN Client Federated users
Hi all, i have an issue with my client vpn and federated users.
When i open the connection using the aws vpn client i get forwarded correctly to my company login page, but then after login i get a 403 error.
The user has admin priveleges and can acces all vpc/vpn settings
in the vpn i allow traffic from all users
so i dont realy find whats wrong.
- Newest
- Most votes
- Most comments
A 403 error encountered after federated login with AWS Client VPN typically signifies a misconfiguration in the SAML identity provider (IdP) response or the absence of required attributes expected by AWS. Administrative privileges within AWS do not override this behavior, as successful authentication relies on the IdP (such as Azure AD, Okta, or Google Workspace) delivering the correct SAML assertions. According to AWS documentation, the SAML response must include at least one attribute, and the Client VPN authorization rules must align with the group claims provided by the IdP.
https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/missing-attribute.html
https://repost.aws/questions/QU5T9pXuYaTv2OkN6zUOqJmg/client-vpn-federated-connection
https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/troubleshooting.html
Relevant content
asked 4 years ago
asked 3 years ago
