403 invalid HTTP request method on configuring Google+Amazon SAML

Question

Hello! I attempted to configure SAML and SCIM with Google Workspace and IAM Identity Center according to the following instructions: https://docs.aws.amazon.com/singlesignon/latest/userguide/gs-gwp.html

I went through the entire process, but when I attempt to click on the Amazon Web Services app in Google Workspace I (and others in my google workspace) get a page with the following error:

```
403 ERROR
The request could not be satisfied.
This distribution is not configured to allow the HTTP request method that was used for this request. The distribution supports only cachable requests. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
```

I imagine something might be misconfigured, but the error message is not informative so I'm not sure where to start. Does anyone have any ideas?

Giovanni Lauria · Answer

The error message "403 ERROR The request could not be satisfied. This distribution is not configured to allow the HTTP request method that was used for this request" suggests an issue with the Amazon CloudFront distribution configuration when integrating with Google Workspace and AWS IAM Identity Center.
   - Verify that the CloudFront distribution is configured to allow the HTTP methods required for the SAML integration. Typically, you should allow `GET`, `POST`, and `OPTIONS` methods.
   - In the CloudFront distribution settings, navigate to the "Behavior" section and check the "Allowed HTTP Methods" settings for the appropriate behavior.
   - If the required methods are not allowed, update the behavior settings to include them.

403 invalid HTTP request method on configuring Google+Amazon SAML

Add your answer

Relevant content