Prerequisites
An IAM Identity Center instance must already be created.
For details, please refer to the AWS documentation.
Configuration Steps
Log in to AWS Console
1. Sign in to the AWS Management Console.
2. From the menu, search for Identity Center.
Add a New Application
3. Navigate to Application Assignments > Applications.
4. Click Add Application.
5. The Select Application Type page will appear.
6. Under Setup Preferences:
Select I have an application to set up
Select Application Type: SAML 2.0
Click Next.
7. Configure the Application
Under How to start > View step-by-step instructions.
Display Name (optional): WavePro
Description (optional): WavePro
8. Configure IAM Identity Center Metadata
Download the IAM Identity Center SAML metadata file.
In WavePro, add the IdP settings:
Go to Preferences > Identity Provider > + Add identity provider
Upload the metadata file you downloaded.
9. Configure Application Metadata
Enter the following values:
Application ACS URL:
https://login.alphaus.cloud/wavepro/samlApplication SAML Audience:
https://login.alphaus.cloud/wavepro/samlClick Submit
10. Set Attribute Mapping
7. In Application Attribute Mapping, configure the required attributes and click Save Changes. This completes the application setting.
User attributes of the application | Mapping to this string value or user attributes of IAMIdentitiyCenter | format |
Subject | ${user:subject} | persistent |
${user:givenName} | Unspecified | |
${user:familyName} | Unspecified | |
${user:email} | Unspecified |
User Settings:
Next, go to Users from the same Identity Center menu > click Add user.
Specify the user's details and click Add user.
プライマリ情報 | 値 |
Username | {Any value} |
{Any value} | |
Confirm Email Address | {Any value} |
First Name | Wave PRO Preferences > ID under Identity Provider Settings |
Last Name | [Wave ID]:
waveID:wave/waverole,user/userrole,role/rolerole |
Assigning Users and Groups:
1. Go to Applications > Customer Management > {Created Application Name} > Assign Users and Groups.
2. Search for the user you created earlier, select it, and click Assign.
3. Navigate to AWS Access Portal > Applications, and confirm that {the Created Application Name} is displayed in the application list.
4. If it is created, click on the corresponding application.
5. If the WavePro login screen is displayed, the setup is complete.
Related Document: Please refer to here for a basic explanation of Ripple MFA.