Howto register AWS SAML metadata in SimpleSAMLphp

1. There is the page Configuring a Relying Party and Adding Claims. It explains how to get AWS metadata https://signin.aws.amazon.com/static/saml-metadata.xml
2. Go to you SimpleSAMLphp Federation tab
3. Click on XML to simpleSAMLphp metadata converter link
   
4. Copy content of https://signin.aws.amazon.com/static/saml-metadata.xml
5. Paste it into Metadata parser window. Click Parse button.
6. Copy Converted metadata content
7. Paste into Noteapd
8. Add Auth Procc Filter (mentioned at https://groups.google.com/forum/#!topic/simplesamlphp/AgHEy-5vHdA)
   

   ‘authproc’ => array(
   10 => array(
   ‘class’ => ‘core:AttributeAdd’,
   ‘https://aws.amazon.com/SAML/Attributes/Role‘ => array(‘arn:aws:iam::<account_number_without_spaces>:role/<role_name>,arn:aws:iam::<account_number_without_spaces>:saml-provider/<’saml_provider_name)
   ),
   20 => array(
   ‘class’ => ‘core:AttributeAdd’,
   ‘https://aws.amazon.com/SAML/Attributes/RoleSessionName‘ => array(‘uid’)
   ),
   ),

9. Open /var/simplesamlphp/metadata/saml20-sp-remote.php file
10. Replace its content by content from Notepad

Advertisement