{"id":97310,"date":"2023-09-05T21:18:32","date_gmt":"2023-09-06T01:18:32","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=97310"},"modified":"2024-02-06T15:37:11","modified_gmt":"2024-02-06T20:37:11","slug":"sso-with-amazon-iam-multiple-roles","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles","title":{"rendered":"Integrate with Amazon IAM (Multiple Roles)"},"content":{"rendered":"\n<p>JumpCloud enables employees of your organization to sign into Amazon&#8217;s Web Service with role-based access using multiple SSO Connectors. <\/p>\n\n\n\n<p>Read this article to learn how to configure the Amazon IAM (Multiple Roles) connector.\u00a0<\/p>\n\n\n\n<p><strong>Prerequisites<\/strong><\/p>\n\n\n\n<ul>\n<li>A JumpCloud administrator account<\/li>\n\n\n\n<li>JumpCloud SSO Package or higher or SSO add-on feature.<\/li>\n\n\n\n<li>AWS Admin account (AWS root user)<\/li>\n\n\n\n<li>AWS organization<\/li>\n<\/ul>\n\n\n\n<p><strong>Important Considerations<\/strong><\/p>\n\n\n\n<ul>\n<li>Amazon IAM only supports IdP-Initiated SSO.<\/li>\n\n\n\n<li>Each connector you create for Amazon IAM can allow for a specific and unique role to be set. Using Tags will enable you to assign specific users to each specific connector.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-creating-a-new-jumpcloud-application-integration\"><strong>Creating a new JumpCloud Application Integration<\/strong><\/h2>\n\n\n\n<ol>\n<li>Log in to the&nbsp;<a href=\"https:\/\/console.jumpcloud.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to\u00a0<strong>USER AUTHENTICATION\u00a0<\/strong>&gt;\u00a0<strong>SSO<\/strong> <strong>Applications<\/strong>.<\/li>\n\n\n\n<li>Click&nbsp;<strong>+&nbsp;Add New Application<\/strong>.<\/li>\n\n\n\n<li>Type the name of the application in the <strong>Search <\/strong>field and select it.<\/li>\n\n\n\n<li>Click <strong>Next<\/strong>.<\/li>\n\n\n\n<li>In the <strong>Display Label<\/strong>, type your name for the application. Optionally, you can enter a <strong>Description<\/strong>, adjust the User Portal Image and choose to hide or <strong>Show in User Portal<\/strong>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>If this is a Bookmark Application, enter your sign-in URL in the <strong>Bookmark URL<\/strong> field.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"7\">\n<li>Optionally, expand <strong>Advanced Settings<\/strong> to specify a value for the<strong> SSO IdP URL<\/strong>. If no value is entered, it will default to <kbd>https:\/\/sso.jumpcloud.com\/saml2\/&lt;applicationname&gt;<\/kbd>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>The <strong>SSO IdP URL<\/strong> is not editable after the application is created. You will have to delete and recreate the connector if you need to edit this field at a later time.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"8\">\n<li>Click <strong>Save Application<\/strong>.<\/li>\n\n\n\n<li>If successful, click:\n<ul>\n<li><strong>Configure Application<\/strong> and go to the next section <\/li>\n\n\n\n<li><strong>Close<\/strong> to configure your new application at a later time <\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Configuring the SSO Integration<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>To configure JumpCloud<\/strong><\/h3>\n\n\n\n<ol>\n<li><a href=\"#creating-a-new-jumpcloud-application-integration\">Create a new application<\/a>&nbsp;or select it from the&nbsp;<strong>Configured Application<\/strong>s list.<\/li>\n\n\n\n<li>Select the&nbsp;<strong>SSO<\/strong>&nbsp;tab.<\/li>\n\n\n\n<li>In the&nbsp;<strong>CONSTANT ATTRIBUTES<\/strong>&nbsp;section, leave the default settings for the values under&nbsp;<strong>Name&nbsp;<\/strong>&lt;<kbd>https:\/\/aws.amazon.com\/SAML\/Attributes\/RoleSessionName<\/kbd>&gt;; and &lt;<kbd>https:\/\/aws.amazon.com\/SAML\/Attributes\/Role<\/kbd>&gt;; respectively.<\/li>\n\n\n\n<li>In the first <strong>value<\/strong>&nbsp;field, leave the default value of <kbd>SSO-User<\/kbd>.<\/li>\n\n\n\n<li>In the second <strong>value<\/strong>&nbsp;field, change the default value of arn:aws:iam::YOUR_AWS_ACCOUNT_NUMBER:role\/SAML-User,arn:aws:iam::YOUR_AWS_ACCOUNT_NUMBER:saml-provider\/JumpCloud<br>(Replace<em>YOUR_AWS_ACCOUNT_NUMBER <\/em>with the account number associated with your AWS Account).<\/li>\n\n\n\n<li>In the field terminating the IdP URL, change the default value to aws-a<\/li>\n\n\n\n<li>Click&nbsp;<strong>save.<\/strong>&nbsp;<\/li>\n<\/ol>\n\n\n\n<p>Click on the <strong>Applications<\/strong> link in the side navigation<\/p>\n\n\n\n<ol>\n<li>Click on the <strong>Amazon Web Services<\/strong> Icon<\/li>\n\n\n\n<li>For values under <strong>Name<\/strong>, leave the <strong>default setting<\/strong> <kbd>(https:\/\/aws.amazon.com\/SAML\/Attributes\/RoleSessionName)<\/kbd> and <kbd>https:\/\/aws.amazon.com\/SAML\/Attributes\/Role<\/kbd> respectively.<\/li>\n\n\n\n<li>Click <strong>Upload IdP Private Key<\/strong> and upload your private key (see note above)<\/li>\n\n\n\n<li>Click <strong>Upload IdP Certificate<\/strong> and upload your public certificate (see note above)<\/li>\n\n\n\n<li>In the <strong>first Value<\/strong> field, leave the default value of SSO-User<\/li>\n\n\n\n<li>In the <strong>second Value <\/strong>field, change the default value of arn:aws:iam::<em>YOUR_AWS_ACCOUNT_NUMBER<\/em>:role\/SAML-User,arn:aws:iam::<em>YOUR_AWS_ACCOUNT_NUMBER<\/em>:saml-provider\/JumpCloud (Replace<em>YOUR_AWS_ACCOUNT_NUMBER <\/em>with the account number associated with your AWS Account)<\/li>\n\n\n\n<li>In the <strong>IdP URL<\/strong> field, change the default value to aws-a<\/li>\n\n\n\n<li>Enter in a Display Label for this Connector<\/li>\n\n\n\n<li>Click <strong>Activate<\/strong><\/li>\n\n\n\n<li>Click the <strong>export metadata<\/strong> button for the <strong>Amazon IAM<\/strong> entry (<em>this will download a metadata file named <\/em><em>JumpCloud-aws-metadata.xml<\/em>)<\/li>\n\n\n\n<li>Repeat Steps 1-7 for the Second AWS SSO Connector<\/li>\n\n\n\n<li>In the <strong>second Value <\/strong>field, change the default value of arn:aws:iam::<em>YOUR_AWS_ACCOUNT_NUMBER<\/em>:role\/SAML-User,arn:aws:iam::<em>YOUR_AWS_ACCOUNT_NUMBER<\/em>:saml-provider\/JumpCloud (Replace <em>YOUR_AWS_ACCOUNT_NUMBER <\/em>with the account number associated with your AWS Account and ensure that this field has arn:aws:iam::YOUR_AWS_ACCOUNT_NUMBER:role\/<strong>SAML2-User<\/strong>,arn:aws:iam::YOUR_AWS_ACCOUNT_NUMBER:saml-provider\/<strong>JumpCloud2<\/strong> )<\/li>\n\n\n\n<li>In the <strong>IdP URL <\/strong>field, change the value to aws-b<\/li>\n\n\n\n<li>Enter in a Display Label for this Connector<\/li>\n\n\n\n<li>Click <strong>Activate<\/strong><\/li>\n\n\n\n<li>Click <strong>export metadata <\/strong>button for the <strong>Amazon IAM <\/strong>entry (<em>this will download a metadata file named <\/em><em>JumpCloud-aws-metadata-2.xml<\/em><\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">\u200b<strong>\u200b<strong>To configure AWS<\/strong><\/strong><\/h3>\n\n\n\n<ol>\n<li>Log in to Amazon Web Services console for your organization<\/li>\n\n\n\n<li>Under the <strong>Security &amp; Identity <\/strong>section, click on <strong>Identity &amp; Access Management (IAM)<\/strong><\/li>\n\n\n\n<li>Click <strong>Identity Providers <\/strong>in the Sidebar under <strong>Details<\/strong><\/li>\n\n\n\n<li>Click <strong>Create Provider<\/strong>\n<ul>\n<li><strong>\u200b<\/strong>Provider Type: <strong>SAML<\/strong><\/li>\n\n\n\n<li>Provider Name: <strong>JumpCloud<\/strong><\/li>\n\n\n\n<li>Click the <strong>Choose File<\/strong> button next to <strong>Metadata file<\/strong> and upload the JumpCloud-aws-metadata.xml file (<em>downloaded in step 12 above<\/em>)<\/li>\n\n\n\n<li>Click <strong>Next Step <\/strong>then select <strong>Create<\/strong><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Create a second <strong>Identity Provider<\/strong>\n<ul>\n<li>Provider Type: <strong>SAML<\/strong><\/li>\n\n\n\n<li>Provider Name: <strong>JumpCloud2<\/strong><\/li>\n\n\n\n<li>Click the <strong>Choose File<\/strong> button next to <strong>Metadata file<\/strong> and upload the JumpCloud-aws-metadata-2.xml file (<em>downloaded in step 18 above<\/em>)<\/li>\n\n\n\n<li>Click <strong>Next Step <\/strong>then select <strong>Create\u200b<\/strong><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>\u200b<\/strong>Click <strong>Roles <\/strong>in the Sidebar under <strong>Details<\/strong><\/li>\n\n\n\n<li>Click <strong>Create New Role \u200b\u200b<\/strong>\n<ul>\n<li>Role Name: <strong>SAML-User<\/strong><\/li>\n\n\n\n<li>Role Type: <strong>Role for Identity Provider Access<\/strong>\n<ul>\n<li><strong>\u200bGrant Web Single Sign-On (WebSSO) access to SAML providers \u200b<\/strong><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>\u200b<\/strong>SAML Provider: <strong>JumpCloud<\/strong><\/li>\n\n\n\n<li>Click <strong>Next Step <\/strong>then <strong>Next Step<\/strong> again on the <strong>Verify Role Trust<\/strong> page<\/li>\n\n\n\n<li>Select the desired <strong>Policies <\/strong>from the list of available policies then click <strong>Next Step<\/strong><\/li>\n\n\n\n<li>Review the information, then select <strong>Create Role<\/strong><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>\u200b<\/strong>Click <strong>Create New Role <\/strong>for the second time\n<ul>\n<li>Role Name: <strong>SAML2-User<\/strong><\/li>\n\n\n\n<li>Role Type: <strong>Role for Identity Provider Access<\/strong>\n<ul>\n<li><strong>\u200bGrant Web Single Sign-On (WebSSO) access to SAML providers<\/strong><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>\u200b<\/strong>SAML Provider: <strong>JumpCloud2<\/strong><\/li>\n\n\n\n<li>Click <strong>Next Step <\/strong>then <strong>Next Step <\/strong>again on the <strong>Verify Role Trust <\/strong>page<\/li>\n\n\n\n<li>Select the desired <strong>Policies <\/strong>from the list of available policies then click <strong>Next Step<\/strong><\/li>\n\n\n\n<li>Review the information, then select <strong>Create Role<\/strong><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"authorizing-user-sso-access\"><strong>Authorizing User SSO Access<\/strong><\/h2>\n\n\n\n<p>Users are implicitly denied access to applications. After you connect an application to JumpCloud, you need to authorize user access to that application. You can authorize user access from the <strong>Application Configuration<\/strong> panel or from the <strong>Groups Configuration<\/strong> panel.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>To authorize user access from the Application Configuration panel<\/strong><\/h3>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\" target=\"_blank\" rel=\"noreferrer noopener\"><\/a><a href=\"https:\/\/console.jumpcloud.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>USER AUTHENTICATION &gt; SSO<\/strong> <strong>Applications<\/strong>, then select the application to which you want to authorize user access.<\/li>\n\n\n\n<li>Select the <strong>User Groups<\/strong> tab. If you need to create a new group of users, see <a href=\"https:\/\/jumpcloud.com\/support\/get-started-user-groups\">Get Started: User Groups<\/a>.<\/li>\n\n\n\n<li>Select the check box next to the group of users you want to give access.<\/li>\n\n\n\n<li>Click <strong>save<\/strong>.&nbsp;<\/li>\n<\/ol>\n\n\n\n<p>To learn how to authorize user access from the&nbsp;<strong>Groups Configuration<\/strong>&nbsp;panel, see&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/authorize-users-to-an-sso-application#user-groups-configuration-panel\">Authorize Users to an SSO Application<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Testing Your Single Sign-on (SSO) Configuration<\/strong><\/h2>\n\n\n\n<p><strong>IdP-Initiated Flow<\/strong><\/p>\n\n\n\n<ul>\n<li>In the JumpCloud Admin Console, create a tag called <strong>SSO-AWS-A<\/strong> &nbsp;and then select the users you wish to grant access to the resources provided in <strong>Step 7<\/strong> of <strong>Part 2<\/strong><\/li>\n\n\n\n<li>Create a second tag called <strong>SSO-AWS-B <\/strong>and then select the users you wish to grant access to the resources provided in <strong>Step 8<\/strong> of <strong>Part 2<\/strong><\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>To deactivate the SSO Integration<\/strong><\/h3>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>USER AUTHENTICATION &gt; SSO<\/strong> <strong>Applications<\/strong>.<\/li>\n\n\n\n<li>Search for the application that you\u2019d like to deactivate and click to open its details panel.&nbsp;<\/li>\n\n\n\n<li>Select the&nbsp;<strong>SSO&nbsp;<\/strong>tab.<\/li>\n\n\n\n<li>Scroll to the bottom of the configuration.<\/li>\n\n\n\n<li>Click&nbsp;<strong>Deactivate SSO<\/strong>.&nbsp;<\/li>\n\n\n\n<li>Click&nbsp;<strong>save<\/strong>.&nbsp;<\/li>\n\n\n\n<li>If successful, you will receive a confirmation message.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"deleting-the-application\"><strong><strong>To delete<\/strong><\/strong> <strong>the application<\/strong><\/h3>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>USER AUTHENTICATION &gt; <strong>SSO<\/strong> <strong>Applications<\/strong><\/strong>.<\/li>\n\n\n\n<li>Search for the application that you\u2019d like to delete.<\/li>\n\n\n\n<li>Check the box next to the application to select it.<\/li>\n\n\n\n<li>Click&nbsp;<strong>Delete.<\/strong><\/li>\n\n\n\n<li>Enter the number of the applications you are deleting<\/li>\n\n\n\n<li>Click&nbsp;<strong>Delete Application<\/strong>.<\/li>\n\n\n\n<li>If successful, you will see an application deletion confirmation notification.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>JumpCloud enables employees of your organization to sign into Amazon&#8217;s Web Service with role-based access using multiple SSO Connectors. Read [&hellip;]<\/p>\n","protected":false},"author":205,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2855,2991,2902],"support_tag":[],"coauthors":[2839],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Integrate with Amazon IAM (Multiple Roles) - JumpCloud<\/title>\n<meta name=\"description\" content=\"Create an Amazon IAM (Multiple Roles) integration with JumpCloud using SSO.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Integrate with Amazon IAM (Multiple Roles)\" \/>\n<meta property=\"og:description\" content=\"Create an Amazon IAM (Multiple Roles) integration with JumpCloud using SSO.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-02-06T20:37:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"joyjaswinski\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles\",\"url\":\"https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles\",\"name\":\"Integrate with Amazon IAM (Multiple Roles) - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-09-06T01:18:32+00:00\",\"dateModified\":\"2024-02-06T20:37:11+00:00\",\"description\":\"Create an Amazon IAM (Multiple Roles) integration with JumpCloud using SSO.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Integrate with Amazon IAM (Multiple Roles)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Integrate with Amazon IAM (Multiple Roles) - JumpCloud","description":"Create an Amazon IAM (Multiple Roles) integration with JumpCloud using SSO.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles","og_locale":"en_US","og_type":"article","og_title":"Integrate with Amazon IAM (Multiple Roles)","og_description":"Create an Amazon IAM (Multiple Roles) integration with JumpCloud using SSO.","og_url":"https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles","og_site_name":"JumpCloud","article_modified_time":"2024-02-06T20:37:11+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes","Written by":"joyjaswinski"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles","url":"https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles","name":"Integrate with Amazon IAM (Multiple Roles) - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-09-06T01:18:32+00:00","dateModified":"2024-02-06T20:37:11+00:00","description":"Create an Amazon IAM (Multiple Roles) integration with JumpCloud using SSO.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/sso-with-amazon-iam-multiple-roles#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Integrate with Amazon IAM (Multiple Roles)"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/97310"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/205"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/97310\/revisions"}],"predecessor-version":[{"id":105375,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/97310\/revisions\/105375"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=97310"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=97310"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=97310"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=97310"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}