By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

VPN Endpoint Authentication Issue with Azure SAML Provider

0

I've configured a VPN endpoint with Federated authentication using Azure as the SAML provider. However, I'm facing an issue with the Authorization rules. When I choose "Allow access to users in a specific access group" and specify the Access group ID, it doesn't work when accessing the VPN client. On the other hand, if I select "Allow access to all users," I can successfully access AWS resources. I would greatly appreciate your assistance with this matter.

Topics
Networking & Content DeliverySecurity, Identity, & ComplianceAWS Well-Architected Framework
Tags
Amazon VPCSecurity, Identity, & ComplianceAWS Identity and Access ManagementNetworking & Content DeliverySecurity
Language
English
Sam
asked 7 months ago286 views
1 Answer
0

Hello.

Check Access Group Configuration in Azure: First, verify that your Azure Access Group is configured correctly. Ensure that the users who should have access to the VPN are added to this Access Group. Also, double-check the Access Group ID to make sure it's accurate.

SAML Token Issuance: Make sure that Azure is correctly issuing SAML tokens to your VPN endpoint. You can do this by checking the Azure SAML token configuration. Ensure that the SAML assertions contain the necessary information for authentication and authorization.

Best regards, Andrii

profile picture
EXPERT
Andrii S
answered 7 months ago
  • Sam
    7 months ago

    I've figured it out. When authorizing ingress, you can select “Allow access to users in a specific access group.” AzureAD sends over the Access Group ID as the groups GUID. To get this go to Groups in AzureAD and you will see it listed next to the group name. Just copy the Object Id and add it to the VPN authorizing rule.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content