[{"data":1,"prerenderedAt":104},["ShallowReactive",2],{"i-heroicons:building-office-2":3,"i-heroicons:computer-desktop":8,"i-heroicons:cloud":10,"i-heroicons:server":12,"i-heroicons:folder":14,"i-heroicons:chart-bar":16,"i-heroicons:lock-closed":18,"i-heroicons:rectangle-stack":20,"i-heroicons:scale":22,"i-heroicons:key":24,"i-heroicons:finger-print":26,"i-heroicons:cpu-chip":28,"i-heroicons:document-text":30,"i-heroicons:shield-exclamation":32,"i-heroicons:shield-check":34,"blog-en-how-to-sso-into-aws-with-yubion-portal":36,"i-heroicons:user":102},{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":7},0,24,false,"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M2.25 21h19.5m-18-18v18m10.5-18v18m6-13.5V21M6.75 6.75h.75m-.75 3h.75m-.75 3h.75m3-6h.75m-.75 3h.75m-.75 3h.75M6.75 21v-3.375c0-.621.504-1.125 1.125-1.125h2.25c.621 0 1.125.504 1.125 1.125V21M3 3h12m-.75 4.5H21m-3.75 3.75h.008v.008h-.008zm0 3h.008v.008h-.008zm0 3h.008v.008h-.008z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":9},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M9 17.25v1.007a3 3 0 0 1-.879 2.122L7.5 21h9l-.621-.621A3 3 0 0 1 15 18.257V17.25m6-12V15a2.25 2.25 0 0 1-2.25 2.25H5.25A2.25 2.25 0 0 1 3 15V5.25m18 0A2.25 2.25 0 0 0 18.75 3H5.25A2.25 2.25 0 0 0 3 5.25m18 0V12a2.25 2.25 0 0 1-2.25 2.25H5.25A2.25 2.25 0 0 1 3 12V5.25\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":11},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M2.25 15a4.5 4.5 0 0 0 4.5 4.5H18a3.75 3.75 0 0 0 1.332-7.257a3 3 0 0 0-3.758-3.848a5.25 5.25 0 0 0-10.233 2.33A4.5 4.5 0 0 0 2.25 15\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":13},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M21.75 17.25v-.228a4.5 4.5 0 0 0-.12-1.03l-2.268-9.64a3.375 3.375 0 0 0-3.285-2.602H7.923a3.375 3.375 0 0 0-3.285 2.602l-2.268 9.64a4.5 4.5 0 0 0-.12 1.03v.228m19.5 0a3 3 0 0 1-3 3H5.25a3 3 0 0 1-3-3m19.5 0a3 3 0 0 0-3-3H5.25a3 3 0 0 0-3 3m16.5 0h.008v.008h-.008zm-3 0h.008v.008h-.008z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":15},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M2.25 12.75V12A2.25 2.25 0 0 1 4.5 9.75h15A2.25 2.25 0 0 1 21.75 12v.75m-8.69-6.44l-2.12-2.12a1.5 1.5 0 0 0-1.061-.44H4.5A2.25 2.25 0 0 0 2.25 6v12a2.25 2.25 0 0 0 2.25 2.25h15A2.25 2.25 0 0 0 21.75 18V9a2.25 2.25 0 0 0-2.25-2.25h-5.379a1.5 1.5 0 0 1-1.06-.44\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":17},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M3 13.125C3 12.504 3.504 12 4.125 12h2.25c.621 0 1.125.504 1.125 1.125v6.75C7.5 20.496 6.996 21 6.375 21h-2.25A1.125 1.125 0 0 1 3 19.875zm6.75-4.5c0-.621.504-1.125 1.125-1.125h2.25c.621 0 1.125.504 1.125 1.125v11.25c0 .621-.504 1.125-1.125 1.125h-2.25a1.125 1.125 0 0 1-1.125-1.125zm6.75-4.5c0-.621.504-1.125 1.125-1.125h2.25C20.496 3 21 3.504 21 4.125v15.75c0 .621-.504 1.125-1.125 1.125h-2.25a1.125 1.125 0 0 1-1.125-1.125z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":19},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M16.5 10.5V6.75a4.5 4.5 0 1 0-9 0v3.75m-.75 11.25h10.5a2.25 2.25 0 0 0 2.25-2.25v-6.75a2.25 2.25 0 0 0-2.25-2.25H6.75a2.25 2.25 0 0 0-2.25 2.25v6.75a2.25 2.25 0 0 0 2.25 2.25\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":21},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M6 6.878V6a2.25 2.25 0 0 1 2.25-2.25h7.5A2.25 2.25 0 0 1 18 6v.878m-12 0q.354-.126.75-.128h10.5q.396.002.75.128m-12 0A2.25 2.25 0 0 0 4.5 9v.878m13.5-3A2.25 2.25 0 0 1 19.5 9v.878m0 0a2.3 2.3 0 0 0-.75-.128H5.25q-.396.002-.75.128m15 0A2.25 2.25 0 0 1 21 12v6a2.25 2.25 0 0 1-2.25 2.25H5.25A2.25 2.25 0 0 1 3 18v-6c0-.98.626-1.813 1.5-2.122\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":23},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M12 3v17.25m0 0c-1.472 0-2.882.265-4.185.75M12 20.25c1.472 0 2.882.265 4.185.75M18.75 4.97A48 48 0 0 0 12 4.5c-2.291 0-4.545.16-6.75.47m13.5 0q1.515.215 3 .52m-3-.52l2.62 10.726c.122.499-.106 1.028-.589 1.202a6 6 0 0 1-2.031.352a6 6 0 0 1-2.031-.352c-.483-.174-.711-.703-.59-1.202zm-16.5.52q1.485-.305 3-.52m0 0l2.62 10.726c.122.499-.106 1.028-.589 1.202a6 6 0 0 1-2.031.352a6 6 0 0 1-2.031-.352c-.483-.174-.711-.703-.59-1.202z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":25},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M15.75 5.25a3 3 0 0 1 3 3m3 0a6 6 0 0 1-7.029 5.912c-.563-.097-1.159.026-1.563.43L10.5 17.25H8.25v2.25H6v2.25H2.25v-2.818c0-.597.237-1.17.659-1.591l6.499-6.499c.404-.404.527-1 .43-1.563A6 6 0 1 1 21.75 8.25\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":27},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M7.864 4.243A7.5 7.5 0 0 1 19.5 10.5c0 2.92-.556 5.709-1.568 8.269M5.742 6.364A7.47 7.47 0 0 0 4.5 10.5a7.46 7.46 0 0 1-1.15 3.993m1.989 3.559A11.2 11.2 0 0 0 8.25 10.5a3.75 3.75 0 1 1 7.5 0q0 .79-.064 1.565M12 10.5a14.94 14.94 0 0 1-3.6 9.75m6.633-4.596a18.7 18.7 0 0 1-2.485 5.33\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":29},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M8.25 3v1.5M4.5 8.25H3m18 0h-1.5M4.5 12H3m18 0h-1.5m-15 3.75H3m18 0h-1.5M8.25 19.5V21M12 3v1.5m0 15V21m3.75-18v1.5m0 15V21m-9-1.5h10.5a2.25 2.25 0 0 0 2.25-2.25V6.75a2.25 2.25 0 0 0-2.25-2.25H6.75A2.25 2.25 0 0 0 4.5 6.75v10.5a2.25 2.25 0 0 0 2.25 2.25m.75-12h9v9h-9z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":31},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M19.5 14.25v-2.625a3.375 3.375 0 0 0-3.375-3.375h-1.5A1.125 1.125 0 0 1 13.5 7.125v-1.5a3.375 3.375 0 0 0-3.375-3.375H8.25m0 12.75h7.5m-7.5 3H12M10.5 2.25H5.625c-.621 0-1.125.504-1.125 1.125v17.25c0 .621.504 1.125 1.125 1.125h12.75c.621 0 1.125-.504 1.125-1.125V11.25a9 9 0 0 0-9-9\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":33},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M12 9v3.75m0-10.036A11.96 11.96 0 0 1 3.598 6A12 12 0 0 0 3 9.75c0 5.592 3.824 10.29 9 11.622c5.176-1.332 9-6.03 9-11.622c0-1.31-.21-2.57-.598-3.75h-.152c-3.196 0-6.1-1.25-8.25-3.286m0 13.036h.008v.008H12z\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":35},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M9 12.75L11.25 15L15 9.75m-3-7.036A11.96 11.96 0 0 1 3.598 6A12 12 0 0 0 3 9.749c0 5.592 3.824 10.29 9 11.623c5.176-1.332 9-6.03 9-11.622c0-1.31-.21-2.571-.598-3.751h-.152c-3.196 0-6.1-1.248-8.25-3.285\"\u002F>",{"id":37,"documentId":38,"title":39,"content":40,"slug":41,"published":42,"createdAt":43,"updatedAt":43,"publishedAt":44,"locale":45,"authorManual":46,"cover":47,"tags":98,"seo":99,"author":51},103,"u2wc63l6oyk2ujp0slw9s8dt","Using the YubiOn Portal SSO to Perform a Single Sign-On to AWS","\u003Cp>On March 16, 2022, single sign-on (SSO) functionality was added to the \u003Ca href=\"https:\u002F\u002Fes.yubion.com\u002F\">YubiOn Portal\u003C\u002Fa>, enabling users to log in to their services without being required to authenticate. Following this, this article will cover AWS's new SSO setting procedures.\u003C\u002Fp>\n\u003Ch2>\u003Cstrong>【Prerequisite】\u003C\u002Fstrong>\u003C\u002Fh2>\n\u003Cul>\n\u003Cli>Must have an AWS account and be able to operate as an administrator.\u003C\u002Fli>\n\u003Cli>Must have a \u003Ca href=\"https:\u002F\u002Fwww.securitykey.yubion.com\u002F\">YubiKey\u003C\u002Fa> with Yubico OTP function.\u003C\u002Fli>\n\u003Cli>The user must be registered in \u003Ca href=\"https:\u002F\u002Fes.yubion.com\u002F\">YubiOn Portal\u003C\u002Fa> and have a YubiKey associated with the operator.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fes.yubion.com\u002Fguide\u002Fja\u002Fsso\u002Fhow_to_start\u002Fintroduction\u002F\">Initial registration for SSO\u003C\u002Fa> must be completed.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Upon registering for the free YubiOn Portal, users will have access to the SSO.\u003C\u002Fp>\n\u003Ch2>\u003Cstrong>【Using the SSO】\u003C\u002Fstrong>\u003C\u002Fh2>\n\u003Cp>To briefly explain the flow, a relationship is established between YubiOn Portal (IdP) and AWS (SP) by exchanging metadata, etc., and then a single sign-on is performed from IdP to SP.\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>1.\u003C\u002Fstrong> \u003Ca href=\"#viewer-604ri\">\u003Cstrong>Preparation of metadata for YubiOn Portal (IdP)\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fh3>\n\u003Cp>Create App (AWS) and download metadata\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>2.\u003C\u002Fstrong> \u003Ca href=\"#viewer-dte2m\">\u003Cstrong>Setting up AWS Side\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fh3>\n\u003Cp>Provider setting (IdP metadata import), Role setting, AWS (SP) metadata download.\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>3.\u003C\u002Fstrong> \u003Ca href=\"#viewer-704as\">\u003Cstrong>Configuration on YubiOn Portal Side\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fh3>\n\u003Cp>AWS metadata import, AWS role and provider ARN settings, session name settings, and accessible members settings.\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>4.\u003C\u002Fstrong> \u003Ca href=\"#viewer-egam6\">\u003Cstrong>Testing SSO from YubiOn Portal (IdP)\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fh3>\n\u003Ch2>\u003Cstrong>【SSO Setup Procedure】\u003C\u002Fstrong>\u003C\u002Fh2>\n\u003Ch3>\u003Cstrong>1.\u003C\u002Fstrong> \u003Ca href=\"#viewer-cssqu\">\u003Cstrong>Prepare metadata for YubiOn Portal\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fh3>\n\u003Cp>Login to YubiOn Portal and access "SSO App Settings" from the sidebar.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_1_11ae72965b.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Click the "Select the App and Add" button.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_2_974aa9a5c8.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Click "AWS Management Console" in the Application Registration modal to register.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_3_cd3b356247.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>After registration, "AWS Management Console" will appear in the App list.\u003C\u002Fp>\n\u003Cp>Then click "AWS Management Console."\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_4_566afd3be8.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Click "Download Metadata" to download the YubiOn Portal metadata used on the AWS side for SSO configuration.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_5_b0d8064fa5.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Save the metadata on the YubiOn Portal side to an arbitrary location for use in the following "AWS Settings."\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>2.\u003C\u002Fstrong> \u003Ca href=\"#viewer-13ude\">\u003Cstrong>Setting up AWS Side\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fh3>\n\u003Cp>In order to use single sign-on, configure ID provider and role settings, first access the AWS management console to configure the YubiOn Portal provider.\u003C\u002Fp>\n\u003Cp>Type "IAM" in the search box at the top of the screen and select "IAM" from the list of services.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_6_05bcfc7339.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Click on "Identity providers" on the left side of the screen.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_7_78191e10ad.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Click the "Add provider" button.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_8_fa80666bb0.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Set the following in the Provider Settings\u003C\u002Fp>\n\u003Col>\n\u003Cli>Provider Type: Select SAML.\u003C\u002Fli>\n\u003Cli>Provider Name: Set a descriptive name (in the example, YubiOnPortal)\u003C\u002Fli>\n\u003Cli>Metadata Document: Upload metadata downloaded from YubiOn Portal.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_9_143e449f53.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Finally, add providers by clicking the "Add provider" button.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_10_74e1cf1468.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Click on the provider added, which in this case is the YubiOnPortal.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_11_572f4d0a0d.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Copy and paste the provider's ARN information into a text editor.\u003C\u002Fp>\n\u003Cp>※This information will be used later in the configuration on the YubiOn Portal side.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_12_183a1e0a51.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Next, set up a role to log in to AWS.\u003C\u002Fp>\n\u003Cp>※In SSO using AWS SAML, specify a role with certain log-in privileges instead of preparing each user.\u003C\u002Fp>\n\u003Cp>Click "Roles" on the left side of the screen.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_13_b9ad7ae091.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Click on the "Create role" button.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_14_a6452898db.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Set the following\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Trusted Entity Type: SAML2.0 Federation\u003C\u002Fli>\n\u003Cli>SAML2.0 Provider: Select the provider that was created (in this case, YubiOn Portal)\u003C\u002Fli>\n\u003Cli>Access Level\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Select "Allow programmatic and AWS Management Console access" to set SSO for management console access here.\u003C\u002Fp>\n\u003Cp>※Conditions\u003C\u002Fp>\n\u003Cp>Add conditions as necessary. No special settings are made here.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Finally, click the "Next" button.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_15_456b312a68.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_16_c1055a802c.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>On the last screen, configure the following settings.\u003C\u002Fp>\n\u003Cp>Role Name: Enter a descriptive role name.\u003C\u002Fp>\n\u003Cp>Description: Enter a description of the role.\u003C\u002Fp>\n\u003Cp>Select Trusted Entities: Modify if necessary.\u003C\u002Fp>\n\u003Cp>Add Permissions: Add if necessary.\u003C\u002Fp>\n\u003Cp>Add Tags: Add tags if desired.\u003C\u002Fp>\n\u003Cp>Finally, click the "Create Role" button.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_17_d874eba1d7.jpeg\" alt=\"\">\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_18_afc103ec4f.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Select the role that was created.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_19_3ebc0242ec.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Copy and paste the role's ARN information into a text editor.\u003C\u002Fp>\n\u003Cp>※This information will be used later in the configuration on the YubiOn Portal side.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_20_a2cee0ca3e.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Finally, download the AWS (SP) side metadata from the following URL\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fsignin.aws.amazon.com\u002Fstatic\u002Fsaml-metadata.xml\">https:\u002F\u002Fsignin.aws.amazon.com\u002Fstatic\u002Fsaml-metadata.xml\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>This concludes the setup on the AWS side.\u003C\u002Fp>\n\u003Cp>Next, move on to the setting of YubiOn Portal.\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>3.\u003C\u002Fstrong> \u003Ca href=\"#viewer-6sg1e\">\u003Cstrong>Configuration on YubiOn Portal Side\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fh3>\n\u003Cp>Return to the "SSO App Settings" page of YubiOn Portal and import AWS (SP) metadata.\u003C\u002Fp>\n\u003Cp>Click "SP Metadata Upload" tab.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_21_3cc4100410.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Upload AWS (SP) side metadata from SP Metadata Upload.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_22_eb897c0532.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>When a confirmation modal appears, click the "Upload" button to upload.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_23_4bd9b450cb.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Next, set the minimum required attributes for the AWS SSO configuration.\u003C\u002Fp>\n\u003Cp>The required fields are as follows.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Role: Specify the Role ARN and Provider ARN, separated by commas.\u003C\u002Fli>\n\u003Cli>RoleSessionName: Name, email address, or other information representing the account logged in.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Click the "Attribute Settings" tab in the lower-left corner of the screen.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_24_504e40ceef.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Set the "Role" attribute to specify the AWS role.\u003C\u002Fp>\n\u003Cp>Click the "Edit" icon on the right side of the "Role" template attribute.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_25_9a3f15b399.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Set the following for the attribute value.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Setting method: Select "Direct input."\u003C\u002Fli>\n\u003Cli>Value: Enter the ARN of the role and the ARN of the provider that was reserved in the AWS side settings, separated by commas.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>E.g., "ARN of role, ARN of the provider."\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Finally, click the "Update" button to update the information.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_26_51ce8a7ab7.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Next, configure the "RoleSessionName" attribute that appears after AWS login.\u003C\u002Fp>\n\u003Cp>Click the "Edit" icon on the right side of "RoleSessionName"\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_27_b09b007617.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Set the following attribute values.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Setting method: Select "Member Information."\u003C\u002Fli>\n\u003Cli>Value: Select "Member Name."\u003C\u002Fli>\n\u003Cli>Finally, click the "Update" button to update the information.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_28_0408896809.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>This concludes the setup of the attributes.\u003C\u002Fp>\n\u003Cp>Continue to set the members who can access AWS.\u003C\u002Fp>\n\u003Cp>Although there is a way to assign members belonging to a group in a batch using the group function, as it is a paid feature, this article will explore individual member creation.\u003C\u002Fp>\n\u003Cp>Click on "Assign member" in the lower right corner of the screen.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_29_1ca0974779.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Select the member to be assigned and click the "Register" button to register.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_30_bb337d8bf1.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>This completes the SSO setup.\u003C\u002Fp>\n\u003Ch3>\u003Cstrong>4.\u003C\u002Fstrong> \u003Ca href=\"#viewer-4t839\">\u003Cstrong>Testing SSO from YubiOn Portal (IdP)\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fh3>\n\u003Cp>Click the "SSO" icon on the side menu and access "SSO App Login."\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_31_1a04290c38.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Click "AWS Management Console.”\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_32_2a57a6021a.png\" alt=\"\">\u003C\u002Fp>\n\u003Cp>Congratulations! AWS log-in was successful.\u003C\u002Fp>\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_33_5ee22ac4d4.png\" alt=\"\">\u003C\u002Fp>\n\u003Ch2>\u003Cstrong>Conclusion\u003C\u002Fstrong>\u003C\u002Fh2>\n\u003Cp>To switch to or purchase the paid SSO version, please leave an inquiry through the Contact Form.\u003C\u002Fp>\n","how-to-sso-into-aws-with-yubion-portal","2022-03-24","2026-04-28T07:19:51.987Z","2026-04-28T07:19:55.002Z","en","YubiOnstaff",{"id":48,"documentId":49,"name":50,"alternativeText":51,"caption":51,"focalPoint":51,"width":52,"height":53,"formats":54,"hash":93,"ext":56,"mime":60,"size":94,"url":95,"previewUrl":51,"provider":96,"provider_metadata":51,"createdAt":97,"updatedAt":97,"publishedAt":97},917,"k1e7g8zbtakzw8plus9ellhx","blog-how-to-sso-into-aws-with-yubion-portal-1.png",null,2372,1130,{"large":55,"small":66,"medium":75,"thumbnail":84},{"ext":56,"url":57,"etag":58,"hash":59,"mime":60,"name":61,"path":51,"size":62,"width":63,"height":64,"sizeInBytes":65},".png","https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Flarge_blog_how_to_sso_into_aws_with_yubion_portal_1_11ae72965b.png","71572832b74f5be9517d3df565bce1f9","large_blog_how_to_sso_into_aws_with_yubion_portal_1_11ae72965b","image\u002Fpng","large_blog-how-to-sso-into-aws-with-yubion-portal-1.png",75.64,1000,476,75636,{"ext":56,"url":67,"etag":68,"hash":69,"mime":60,"name":70,"path":51,"size":71,"width":72,"height":73,"sizeInBytes":74},"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fsmall_blog_how_to_sso_into_aws_with_yubion_portal_1_11ae72965b.png","ebf5188a57c6775ac2d6b1047512c364","small_blog_how_to_sso_into_aws_with_yubion_portal_1_11ae72965b","small_blog-how-to-sso-into-aws-with-yubion-portal-1.png",28.98,500,238,28977,{"ext":56,"url":76,"etag":77,"hash":78,"mime":60,"name":79,"path":51,"size":80,"width":81,"height":82,"sizeInBytes":83},"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fmedium_blog_how_to_sso_into_aws_with_yubion_portal_1_11ae72965b.png","dca40d5a656d30f2982ad9297daed6cf","medium_blog_how_to_sso_into_aws_with_yubion_portal_1_11ae72965b","medium_blog-how-to-sso-into-aws-with-yubion-portal-1.png",50.7,750,357,50695,{"ext":56,"url":85,"etag":86,"hash":87,"mime":60,"name":88,"path":51,"size":89,"width":90,"height":91,"sizeInBytes":92},"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fthumbnail_blog_how_to_sso_into_aws_with_yubion_portal_1_11ae72965b.png","4b633ccf538e97db89b0ce8b99a79876","thumbnail_blog_how_to_sso_into_aws_with_yubion_portal_1_11ae72965b","thumbnail_blog-how-to-sso-into-aws-with-yubion-portal-1.png",11.13,245,117,11131,"blog_how_to_sso_into_aws_with_yubion_portal_1_11ae72965b",43.74,"https:\u002F\u002Fdty9gbw7gew16.cloudfront.net\u002Fuploads\u002Fblog_how_to_sso_into_aws_with_yubion_portal_1_11ae72965b.png","aws-s3","2026-04-28T07:17:14.194Z",[],{"id":100,"metaDescription":101},337,"Learn how to set up single sign-on (SSO) for your AWS account using the YubiOn Portal and a YubiKey with this guide.",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":103},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"1.5\" d=\"M15.75 6a3.75 3.75 0 1 1-7.5 0a3.75 3.75 0 0 1 7.5 0M4.501 20.118a7.5 7.5 0 0 1 14.998 0A17.9 17.9 0 0 1 12 21.75c-2.676 0-5.216-.584-7.499-1.632\"\u002F>",1783406314303]