跳至內容

Amazon Connect SAML 2.0 Verification

0

How can we verify if the Amazon Connect instance created is SMAL 2.0 enabled or not? Or is it only selectable at the time of instance creation, with no way to verify or change it later?

已提問 2 年前檢視次數 352 次

4 個答案
0

Hi Ali,

The identity management type (SAML 2.0-based authentication) is selected during the instance creation process. This choice is made in the initial setup and cannot be changed after the instance is created. You can verify the identity management type of your Amazon Connect instance through the AWS Management Console. Navigate to the Amazon Connect console and select your instance. Look for the "Identity management" or "Authentication" settings in the instance details.

Plan your identity management in Amazon Connect

AWS

已回答 2 年前

  • Thanks! I understand that once a Connect instance is created, the authentication type cannot be changed. However, my main question is: how can I determine if the existing instance is SAML 2.0-based? I am unable to find the "Identity Management" or "Authentication" settings in the instance details. I have seen references to these options in other posts, but I still cannot locate them. A screenshot would be helpful.

  • To determine if your instance uses SAML 2.0 you can observe the login behavior of your instance: If users are redirected to your IdP login page when accessing Connect, it's SAML-enabled If users log in directly with Connect credentials, it's using Connect's built-in authentication

0

For SAML-configured instances, administrators can confirm the authentication setup by reviewing the associated IAM Identity Provider settings in the AWS console's IAM section. (IAM ==> Access Management ==> Identity Providers).

AWS

已回答 2 年前

  • Thanks, Marc. Yes, I can see the IDP there, but my query is about verifying the authentication type for an existing Amazon Connect instance. Since multiple Amazon Connect instances can be created, how can I determine whether a specific instance was set up with:

    1. Store users in Amazon Connect
    2. Link to an existing directory
    3. SAML 2.0-based authentication

    We can choose only one option during instance creation, but how can I check which one was used for an already existing instance?

0

I understand that once a Connect instance is created, the authentication type cannot be changed. However, my main question is: how can I determine if the existing instance is SAML 2.0-based? I am unable to find the "Identity Management" or "Authentication" settings in the instance details. I have seen references to these options in other posts, but I still cannot locate them. A screenshot would be helpful.

Screenshot

已回答 2 年前

0

Use the AWS CLI: aws connect describe-instance --instance-id <arn>

If the IdentityManagementType attribute specifies SAML, you have your answer.

已回答 10 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。