{"id":99232,"date":"2023-10-06T18:16:07","date_gmt":"2023-10-06T22:16:07","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=99232"},"modified":"2024-06-11T14:41:02","modified_gmt":"2024-06-11T18:41:02","slug":"sso-with-amazon-aws-iam","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam","title":{"rendered":"SSO with Amazon Web Services (IAM)"},"content":{"rendered":"\n<p>Use JumpCloud SAML Single Sign On (SSO) to give your users convenient but secure access to all their web applications with a single set of credentials. <\/p>\n\n\n\n<p>Read this article to learn how to configure the Amazon Web Services (AWS IAM) connector.&nbsp;<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>If you want to configure an AWS IAM Identity Center (FKA AWS SSO) connector, see <a href=\"https:\/\/jumpcloud.com\/support\/integrate-with-aws-iam-identity-center\">Integrate with AWS IAM Identity Center<\/a>. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>Prerequisites<\/strong><\/p>\n\n\n\n<ul>\n<li>A JumpCloud administrator account<\/li>\n\n\n\n<li>JumpCloud SSO Package or higher or SSO add-on feature<\/li>\n\n\n\n<li>AWS Admin account (AWS root user)<\/li>\n\n\n\n<li>AWS organization<\/li>\n\n\n\n<li>Your\u00a0<strong>AWS account number<\/strong>, <strong>region <\/strong>and <strong>subdomain <\/strong>name<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>Find your account number by going to the main AWS console, go to&nbsp;<strong>All Services<\/strong>, under&nbsp;<strong>Security, Identity &amp; Compliance<\/strong>&nbsp;select&nbsp;<strong>IAM<\/strong>. It will be embedded in the IAM users sign-in link:&nbsp;<kbd>https:\/\/&lt;YOUR_AWS_ACCOUNT_NUMBER&gt;.signin.aws.amazon.com\/console<\/kbd>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>Important Considerations <\/strong><\/p>\n\n\n\n<ul>\n<li>This connector supports additional Constant Attributes that are sent in the assertion, e.g., Amazon supports\u00a0<a href=\"https:\/\/aws.amazon.com\/blogs\/security\/enable-your-federated-users-to-work-in-the-aws-management-console-for-up-to-12-hours\/\" target=\"_blank\" rel=\"noreferrer noopener\">SessionDuration<\/a>\u00a0in order to allow up to 12 hour sessions before logout. By default, the connector template contains this additional attribute where the Name is\u00a0<kbd>https:\/\/aws.amazon.com\/SAML\/Attributes\/SessionDuration<\/kbd>\u00a0and the Value in seconds must be between 15 minutes and 12 hours; e.g., for 15 minutes, enter a value of 900<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-creating-a-new-jumpcloud-application-integration\"><strong>Creating a new JumpCloud Application Integration<\/strong><\/h2>\n\n\n\n<ol>\n<li>Log in to the&nbsp;<a href=\"https:\/\/console.jumpcloud.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to\u00a0<strong>USER AUTHENTICATION\u00a0<\/strong>&gt;\u00a0<strong>SSO<\/strong> <strong>Applications<\/strong>.<\/li>\n\n\n\n<li>Click&nbsp;<strong>+&nbsp;Add New Application<\/strong>.<\/li>\n\n\n\n<li>Type the name of the application in the <strong>Search <\/strong>field and select it.<\/li>\n\n\n\n<li>Click <strong>Next<\/strong>.<\/li>\n\n\n\n<li>In the <strong>Display Label<\/strong>, type your name for the application. Optionally, you can enter a <strong>Description<\/strong>, adjust the User Portal Image and choose to hide or <strong>Show in User Portal<\/strong>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>If this is a Bookmark Application, enter your sign-in URL in the <strong>Bookmark URL<\/strong> field.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"7\">\n<li>Optionally, expand <strong>Advanced Settings<\/strong> to specify a value for the<strong> SSO IdP URL<\/strong>. If no value is entered, it will default to <kbd>https:\/\/sso.jumpcloud.com\/saml2\/&lt;applicationname&gt;<\/kbd>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>The <strong>SSO IdP URL<\/strong> is not editable after the application is created. You will have to delete and recreate the connector if you need to edit this field at a later time.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"8\">\n<li>Click <strong>Save Application<\/strong>.<\/li>\n\n\n\n<li>If successful, click:\n<ul>\n<li><strong>Configure Application<\/strong> and go to the next section <\/li>\n\n\n\n<li><strong>Close<\/strong> to configure your new application at a later time <\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Configuring the SSO Integration<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>To configure JumpCloud 1<\/strong><\/h3>\n\n\n\n<ol>\n<li><a href=\"https:\/\/jumpcloud.com\/support\/integrate-with-abacus#creating-a-new-jumpcloud-application-integration\">Create a new application<\/a>&nbsp;or select it from the&nbsp;<strong>Configured Application<\/strong>s list.<\/li>\n\n\n\n<li>Select the&nbsp;<strong>SSO<\/strong>&nbsp;tab.<\/li>\n\n\n\n<li>Replace any instances of YOUR_AWS_REGION, YOUR_SUBDOMAIN, and YOUR_SSO_ID with your AWS values.<\/li>\n\n\n\n<li>In the&nbsp;<strong>IdP URL<\/strong>, either leave the default value or enter a plaintext string unique to this connector.<\/li>\n\n\n\n<li>Configure the&nbsp;<strong>Constant Attributes<\/strong>&nbsp;if you want to use them to create AWS roles. Learn more about options for creating AWS roles in&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/sso-with-with-amazon-aws-iam#to-configure-jumpcloud-2\">To configure&nbsp;JumpCloud 2<\/a>.&nbsp;<\/li>\n\n\n\n<li>Click&nbsp;<strong>save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Download the JumpCloud metadata<\/strong> <strong>file<\/strong><\/h4>\n\n\n\n<ol>\n<li>Find&nbsp;your application in the&nbsp;<strong>Configured Applications<\/strong>&nbsp;list and click anywhere in the row to reopen its configuration window.<\/li>\n\n\n\n<li>Select the <strong>SSO <\/strong>tab and click <strong>Export Metadata<\/strong>.<\/li>\n\n\n\n<li>The <strong>JumpCloud-&lt;applicationname&gt;-metadata.xml<\/strong> will be exported to your local <strong>Downloads <\/strong>folder.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>Metadata can also be downloaded from the <strong>Configured Applications<\/strong> list. Search for and select the application in the list and then click <strong>Export Metadata<\/strong> in the top right corner of the window.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>To configure AWS<\/strong> <strong>IAM<\/strong><\/h3>\n\n\n\n<ol>\n<li>Log in to the Amazon Web Services console for your organization as an administrator.<\/li>\n\n\n\n<li>In the main console, navigate to&nbsp;<strong>All Services<\/strong> &gt;&nbsp;<strong>Security, Identity &amp; Compliance<\/strong>&nbsp;&gt;&nbsp;<strong>IAM &gt; Identity Providers.<\/strong><\/li>\n\n\n\n<li>Select&nbsp;<strong>Create Provider.<\/strong><\/li>\n\n\n\n<li>For&nbsp;<strong>Provider Type<\/strong>, select&nbsp;<strong>SAML.<\/strong><\/li>\n\n\n\n<li>For&nbsp;<strong>Provider Name<\/strong>, enter JumpCloud. If another name is chosen, this string will need to replace JumpCloud in the role attribute value in the JumpCloud configuration.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Choose File<\/strong>, then browse to and upload the metadata file downloaded in the previous section.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Next Step.<\/strong><\/li>\n\n\n\n<li>On the next screen, select&nbsp;<strong>Create.<\/strong><\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>To configure JumpCloud 2<\/strong><\/h3>\n\n\n\n<ol>\n<li>When a SAML connection is established between AWS and JumpCloud, manage user access to the AWS SSO connector by configuring federated roles in AWS and then configuring roles in JumpCloud. There are two options to configure roles in JumpCloud. :\n<ul>\n<li><strong>Option 1<\/strong>:\u00a0<a href=\"https:\/\/jumpcloud.com\/support\/configure-aws-roles-in-jumpcloud-with-constant-attributes\" target=\"_blank\" rel=\"noreferrer noopener\">Configure AWS roles with constant attributes<\/a><\/li>\n\n\n\n<li><strong>Option 2<\/strong>:\u00a0<a href=\"https:\/\/jumpcloud.com\/support\/configure-dynamic-aws-roles-in-jumpcloud\" target=\"_blank\" rel=\"noreferrer noopener\">Configure AWS roles with custom user attributes<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>To grant access via IAM roles for SSO with AWS<\/strong><\/h3>\n\n\n\n<p>When admins connect AWS in JumpCloud for single sign on (SSO), AWS accepts SSO based on roles. AWS roles are a set of permissions for making AWS service requests that are not associated with a user or group (Refer to&nbsp;<a href=\"https:\/\/aws.amazon.com\/iam\/faqs\/\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon\u2019s IAM FAQs<\/a>&nbsp;for more information). Admins can configure AWS roles in JumpCloud with Custom User Attributes and Constant Attributes.&nbsp;<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/jumpcloud.com\/support\/integrate-with-aws-iam-identity-center\" target=\"_blank\" rel=\"noreferrer noopener\">Integrate with AWS IAM (Multiple Roles)<\/a>\u00a0<\/li>\n\n\n\n<li><a href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/Creating-Federated-Roles-in-AWS\" target=\"_blank\" rel=\"noreferrer noopener\">Create federated roles in AWS<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"authorizing-user-sso-access\"><strong>Authorizing User SSO Access<\/strong><\/h2>\n\n\n\n<p>Users are implicitly denied access to applications. After you connect an application to JumpCloud, you need to authorize user access to that application. You can authorize user access from the <strong>Application Configuration<\/strong> panel or from the <strong>Groups Configuration<\/strong> panel.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>To authorize user access from the Application Configuration panel<\/strong><\/h3>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\" target=\"_blank\" rel=\"noreferrer noopener\"><\/a><a href=\"https:\/\/console.jumpcloud.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>USER AUTHENTICATION &gt; SSO<\/strong> <strong>Applications<\/strong>, then select the application to which you want to authorize user access.<\/li>\n\n\n\n<li>Select the <strong>User Groups<\/strong> tab. If you need to create a new group of users, see <a href=\"https:\/\/jumpcloud.com\/support\/get-started-user-groups\">Get Started: User Groups<\/a>.<\/li>\n\n\n\n<li>Select the check box next to the group of users you want to give access.<\/li>\n\n\n\n<li>Click <strong>save<\/strong>.&nbsp;<\/li>\n<\/ol>\n\n\n\n<p>To learn how to authorize user access from the&nbsp;<strong>Groups Configuration<\/strong>&nbsp;panel, see&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/authorize-users-to-an-sso-application#user-groups-configuration-panel\">Authorize Users to an SSO Application<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"validating-sso-authentication-workflows\"><strong>Validating SSO user authentication workflow(s)<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-idp-initiated-user-workflow\"><strong>IdP-initiated<\/strong> <strong>user workflow<\/strong><\/h3>\n\n\n\n<ul>\n<li>Access the <a href=\"https:\/\/console.jumpcloud.com\/userconsole#\/\">JumpCloud User Console<\/a><\/li>\n\n\n\n<li>Go to\u00a0<strong>Applications<\/strong> and click an application tile to launch it<\/li>\n\n\n\n<li>JumpCloud asserts the user&#8217;s identity to the SP and is authenticated without the user having to log in to the application<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-sp-initiated-user-workflow\"><strong>SP-initiated<\/strong> <strong>user workflow<\/strong><\/h3>\n\n\n\n<ul>\n<li>Go\u00a0to the SP application login &#8211; generally, there is either a special link or an adaptive username field that detects the user is authenticated through SSO<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>This varies by SP.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ul>\n<li>Login redirects the user to JumpCloud where the user enters their JumpCloud credentials<\/li>\n\n\n\n<li>After the user is logged in successfully, they are redirected\u00a0back to the SP and automatically logged in<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Removing the SSO Integration<\/strong><\/h2>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>These are steps for removing the integration in JumpCloud. Consult your SP&#8217;s documentation for any additional steps needed to remove the integration in the SP. Failure to remove the integration successfully for both the SP and JumpCloud may result in users losing access to the application.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"deactivating-the-sso-integration\"><strong><strong>To deactivate<\/strong><\/strong> <strong>the SSO Integration<\/strong><\/h3>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>USER AUTHENTICATION &gt; <strong>SSO<\/strong> <strong>Applications<\/strong><\/strong>.<\/li>\n\n\n\n<li>Search for the application that you\u2019d like to deactivate and click to open its details panel.&nbsp;<\/li>\n\n\n\n<li>Select the&nbsp;<strong>SSO&nbsp;<\/strong>tab.<\/li>\n\n\n\n<li>Scroll to the bottom of the configuration.<\/li>\n\n\n\n<li>Click&nbsp;<strong>Deactivate SSO<\/strong>.&nbsp;<\/li>\n\n\n\n<li>Click&nbsp;<strong>save<\/strong>.&nbsp;<\/li>\n\n\n\n<li>If successful, you will receive a confirmation message.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"deleting-the-application\"><strong><strong>To delete<\/strong><\/strong> <strong>the application<\/strong><\/h3>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>USER AUTHENTICATION &gt; <strong>SSO<\/strong> <strong>Applications<\/strong><\/strong>.<\/li>\n\n\n\n<li>Search for the application that you\u2019d like to delete.<\/li>\n\n\n\n<li>Check the box next to the application to select it.<\/li>\n\n\n\n<li>Click&nbsp;<strong>Delete.<\/strong><\/li>\n\n\n\n<li>Enter the number of the applications you are deleting<\/li>\n\n\n\n<li>Click&nbsp;<strong>Delete Application<\/strong>.<\/li>\n\n\n\n<li>If successful, you will see an application deletion confirmation notification.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Use JumpCloud SAML Single Sign On (SSO) to give your users convenient but secure access to all their web applications [&hellip;]<\/p>\n","protected":false},"author":205,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2855,2991,2902],"support_tag":[],"coauthors":[2839],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>SSO with Amazon Web Services (IAM) - JumpCloud<\/title>\n<meta name=\"description\" content=\"Create an Amazon AWS IAM integration with JumpCloud using SSO.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SSO with Amazon Web Services (IAM)\" \/>\n<meta property=\"og:description\" content=\"Create an Amazon AWS IAM integration with JumpCloud using SSO.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-06-11T18:41:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"joyjaswinski\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam\",\"url\":\"https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam\",\"name\":\"SSO with Amazon Web Services (IAM) - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-10-06T22:16:07+00:00\",\"dateModified\":\"2024-06-11T18:41:02+00:00\",\"description\":\"Create an Amazon AWS IAM integration with JumpCloud using SSO.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"SSO with Amazon Web Services (IAM)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SSO with Amazon Web Services (IAM) - JumpCloud","description":"Create an Amazon AWS IAM integration with JumpCloud using SSO.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam","og_locale":"en_US","og_type":"article","og_title":"SSO with Amazon Web Services (IAM)","og_description":"Create an Amazon AWS IAM integration with JumpCloud using SSO.","og_url":"https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam","og_site_name":"JumpCloud","article_modified_time":"2024-06-11T18:41:02+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes","Written by":"joyjaswinski"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam","url":"https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam","name":"SSO with Amazon Web Services (IAM) - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-10-06T22:16:07+00:00","dateModified":"2024-06-11T18:41:02+00:00","description":"Create an Amazon AWS IAM integration with JumpCloud using SSO.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/sso-with-amazon-aws-iam#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"SSO with Amazon Web Services (IAM)"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/99232"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/205"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/99232\/revisions"}],"predecessor-version":[{"id":111381,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/99232\/revisions\/111381"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=99232"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=99232"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=99232"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=99232"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}