Overview
This guide walks you through the steps to integrate with AWS IAM Identity Center for MFA authentication in Wave Pro.
Prerequisites
An IAM Identity Center instance must already be created.
For details, please refer to the AWS documentation.
Step 1: Log in to the AWS Console
Sign in to the AWS Management Console.
From the search bar, search for and navigate to Identity Center.
Step 2: Add a New Application
Navigate to Application Assignments > Applications.
Click Add Application.
On the Select Application Type page, under Setup Preferences:
Select I have an application to set up
Select Application Type: SAML 2.0
Click Next
Step 3: Configure the Application
Under How to start > View step-by-step instructions.
Enter the following (optional):
Display Name: WavePro
Description: WavePro
Step 4: Configure IAM Identity Center Metadata
Download the IAM Identity Center SAML metadata file.
In WavePro, add the IdP settings:
Go to Preferences > Identity Provider > + Add identity provider
Upload the metadata file you downloaded.
Step 5: Configure Application Metadata
Enter the following values and click Submit:
Application ACS URL:
https://login.alphaus.cloud/wavepro/samlApplication SAML Audience:
https://login.alphaus.cloud/wavepro/saml
Step 6: Set Attribute Mapping
In Application Attribute Mapping, configure the following attributes and click Save Changes:
User attributes of the application | Mapping to this string value or user attributes of IAMIdentitiyCenter | format |
Subject | ${user:subject} | persistent |
${user:givenName} | Unspecified | |
${user:familyName} | Unspecified | |
${user:email} | Unspecified |
Step 7: Add a User
From the Identity Center menu, navigate to Users and click Add User.
Fill in the user's details and click Add User:
Field | Value |
Username | {Any value} |
{Any value} | |
Confirm Email Address | {Any value} |
First Name | WavePro Preferences > ID under Identity Provider Settings |
Last Name | [Wave ID]:
waveID:wave/waverole,user/userrole,role/rolerole |
Step 8: Assigning Users and Groups:
Navigate to Applications > Customer Management > {Created Application Name} > Assign Users and Groups.
Search for the user you created earlier, select it, and click Assign.
Navigate to AWS Access Portal > Applications, and confirm that {the Created Application Name} is displayed in the application list.
Click on the application.
If the WavePro login screen is displayed, the setup is complete. ✅
For a basic explanation of Ripple MFA, please refer to this article.
Need More Help?
If any errors occur during the process or if you have any questions, please reach out to us:
📧 Email: ripple_cs@alphaus.cloud
💬 Live Chat: Available in the bottom-right corner of your dashboard
📖 Help Center: https://help.alphaus.cloud/