IAM Identity Center to Redshift integration: Registered identity provider does not exist for AWSIDC

Hi there,

I am trying to integrate IAM Identity Center with Redshift. We manage Users and Groups from IAM Identity Center from Management account where the Redshift cluster exists in an OU account. By following the by following the guide

1. Created an IAM role required for creating Redshift IDC Application.
2. Created Redshift IDC Application via create-redshift-idc-application
3. Verified IdcOnboardStatus is Completed, and Redshift application is displayed from IAM Identity Center from Management Account.
4. Assigned existing user group from IAM Identity Center in Redshift.

There is a step asking to create a role with command CREATE ROLE <idcnamespace:rolename>; which is failing with an error

ERROR: registered identity provider does not exist for "AWSIDC:AWS ADMINS"

Hence the fact that, AWSIDC is the default value for identity namespace and AWS ADMINS is the user group assigned to Redshift. I am currently stuck at this point and don't know how to proceed.

Redshift-IDC-SSO-Role role has the required policy

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "EnableSSO",
            "Effect": "Allow",
            "Action": [
                "sso:DescribeApplication",
                "sso:DescribeInstance"
            ],
            "Resource": [
                "*"
            ]
        }
    ]
}

Here is the request/response for create-redshift-idc-application api.

aws redshift create-redshift-idc-application \
--idc-instance-arn 'arn:aws:sso:::instance/ssoins-******** \
--idc-display-name 'redshift-data-uat' \
--iam-role-arn 'arn:aws:iam::*******:role/Redshift-IDC-SSO-Role' \
--redshift-idc-application-name 'redshift-data-uat'

{
    "IdcInstanceArn": "arn:aws:sso:::instance/ssoins-******",
    "RedshiftIdcApplicationName": "redshift-data-uat",
    "RedshiftIdcApplicationArn": "arn:aws:redshift:us-east-1:******:redshiftidcapplication:******************",
    "IdentityNamespace": "AWSIDC",
    "IdcDisplayName": "redshift-data-uat",
    "IamRoleArn": "arn:aws:iam::******:role/Redshift-IDC-SSO-Role",
    "IdcManagedApplicationArn": "arn:aws:sso::******:application/ssoins-******/apl-******",
    "IdcOnboardStatus": "Completed",
    "AuthorizedTokenIssuerList": [],
    "ServiceIntegrations": []
}

Thanks for the help