Hacker News Reader

Comment by davidu | Hacker News Reader

Update: I realize now this is Amazon offering SSO services, not just supporting SAML / Federated authentication.

Ignore rest of my comment:

  Proof you can build a massive, multi-billion dollar enterprise business without supporting SSO.

  I would not have immediately guessed that statement to be true, and I would have thought AWS already had SSO support.

View on HN

It helps if you have a massive, multi billion dollar consumer business everyone's already registered with.

It was always pretty easy to build yourself with their federated auth system. Nice to have proper support now though.

Edit: no, it still isn’t really anything like what I’m wanting. This particular product requires Microsoft AD. I just want our admins to be able to log into AWS via google apps. :(

You should be able to do this already[1]. What issues are you having?

[1] https://support.google.com/a/answer/6194963 via http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_pro...

Thank you very much for those links. After a couple of hours of messing around I have managed to get that working well. :)

I want the ability to use Google/G-Suite as an identity provider to log into multiple AWS accounts. We have dev and prod workloads that run in completely separate AWS accounts. I want to be able to use Google SSO and the ability to select which AWS account to log into

I don't have access to a G-Suite account to test this with, but afaict you should be able to do this by just adding each AWS account in turn and giving it a different Application Name and description in the G-Suite interface.

Reply on news.ycombinator.com