Introduction

Enable Single SignOn from AWS SSO to your Canary Console with these steps.

Step 1:

Log in to your Console.

Step 2:

Click on the Gear Icon and then Global Settings.

Step 3:

Click on SAML and your Console SAML settings will be displayed.

Step 4:

Log in to AWS and navigate to AWS SSO > Applications and then select Add a new application.

Step 5:

Select Add a custom SAML 2.0 application.

Step 6:

1. Add a Display name - i.e: we used Canary Console

2. Add a Description - i.e: we used SAML Federation into Canary Console

Step 7:

Select If you don't have a metadata file, you can manually type your metadata values.

Step 8:

1. Under Application ACS URL* field, paste the ACS (Login URL) from Step 3

2. Under Application SAML audience* field, paste the Service Provider ID from Step 3

3 Select Save changes

Step 9:

Select Download to download your metadata file and send this back to us in a support ticket at support@canary.tools to complete the configuration on our side.

Note: please include your AWS SSO Portal URL in the mail - i.e https://[yourdirectory].awsapps.com/start

Step 10:

Select Attribute mappings tab.

Step 11:

Map the Subject attribute to "${user:email}" and set the Format to "emailAddress".

Additionally, add a new attribute mapping "client" with the value "canary-console" and set the Format to "unspecified".

Step 12:

Select which users and/or groups are allowed to authenticate.

Step 13:

Click on "Canary Console" in your AWS SSO portal, once we've confirmed that we've completed the setup on our side.

You're done! ;-)