1 Answer
- Newest
- Most votes
- Most comments
1
AWS Client VPN is not one of the pre-integrated applications in AWS SSO. As a workaround, create a custom SAML application in AWS SSO. This requires re-creation of AWS VPN Client Endpoint.
- Create a custom application in AWS SSO to be used with AWS Client VPN
- Create a new Identity Provider (IdP) in IAM Provider console, and use the AWS SSO as an identity provider with the custom application that was created in Step 1
- Finally, use the newly created IdP with AWS Client VPN
- Custom SAML 2.0 applications https://docs.aws.amazon.com/singlesignon/latest/userguide/samlapps.html
- Authentication - SAML-based IdP configuration resources -https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/client-authentication.html#saml-config-resources
- Authenticate AWS Client VPN users with AWS Single Sign-On https://aws.amazon.com/blogs/security/authenticate-aws-client-vpn-users-with-aws-single-sign-on/
Relevant content
- asked a year ago
- How do I get notified when the certificate associated to the Client VPN endpoint is about to expire?AWS OFFICIALUpdated 4 months ago
- AWS OFFICIALUpdated 4 months ago
- AWS OFFICIALUpdated a year ago
- AWS OFFICIALUpdated 2 years ago