Configuring parameters in IAM Identity Center

To access SSO through Amazon Web Services (AWS), as a first step you need to configure users and Talend Administration Center application in IAM Identity Center.

1. Log in to AWS console and click IAM Identity Center.
   
2. Create users:
   
   Information noteNote: Users created in Azure Active Directory can be synchronized in AWS.
3. Go to the Applications panel. Click Add application to create Talend Administration Center SSO application.
   
4. Select Add custom SAML 2.0 application option and click Next.
5. Enter the Display name and Description.
6. Select Manually type your metadata values.
7. In the Application ACS URL and Application SAML audience fields, enter Talend Administration Center SSO login access URL: http://<host>:<port>/<application_name>/ssologin.
   Click Submit.
8. Click Edit attribute mappings to assign extra attribute mapping configuration to Talend Administration Center SSO application.
   Fill in the Subject, LastName, firstName and email fields.
   
   Information noteNote: If you use role-based authentication, also fill in the tac.role and tac.projectType fields.
9. Click Assign Users to grant Talend Administration Center SSO access to users/groups.
   
10. Go to Configure and click the Download button under IAM Identity Center SAML metadata file.
    
    Keep the file for later use.