Set up Google Workspace SSO via SAML for Amazon Web Services

Google doc

• Google Workspace: https://support.google.com/a/answer/6194963

Should be

Step 1 Security -> Authentication -> SSO with Google as SAML IdP

instead of...

Step 1 Security -> Set up single sign-on (SSO) for SAML applications.

Misc: SSO URL, Entity ID, IdP metadata

Related documentation

• AWS documentation (2016): https://aws.amazon.com/blogs/security/how-to-set-up-federated-single-sign-on-to-aws-using-google-apps/

https://aws.amazon.com/SAML/Attributes/RoleSessionName

https://aws.amazon.com/SAML/Attributes/Role

• Google Workspace: https://support.google.com/a/answer/6194963

Related

• AWS Role: Create a role for SAML federation https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-idp_saml.html
• SAMLResponse: Your request included an invalid saml response

See also

• IdP, AWS IAM identity provider, Set up Google Workspace SSO via SAML for Amazon Web Services, OIDC
• SAML, IdP, Assertion, Attribute, SCIM, Amazon Cognito, OpenID Connect (OIDC), SAML response, SAML:EduPersonOrgDN, Assertion Consumer Service (ACS), SAML examples, Entity ID, Name ID, SAMLResponse, saml-provider
• Single sign-on: Okta, Red Hat Single Sign-On, Keycloak, SAML, ADFS, Access Management Magic Quadrant, Oracle Access Manager, AWS SSO, Azure Active Directory, Federated authentication, Google Workspace: set up SSO via SAML for Amazon Web Services, Login with, Microsoft account, Shibboleth