Amazon Web Services Connection Configuration

In the Target Resource field, enter a URL to redirect the user to after IdP-initiated single sign-on (SSO).

In the Single Logout Endpoint field, enter a URL for PingOne to send single logout (SLO) requests to.

In the Single Logout Response Endpoint field, enter a URL for PingOne to send SLO responses to.

To add a Primary Verification Certificate, click Browse to locate and upload a local certificate file used to verify SLO requests and responses coming from Achiever.

To add a Secondary Verification Certificate, click Browse to locate and upload a local certificate used to verify SLO requests and responses in case the primary certificate fails.

Select the Force Re-authentication checkbox to require your identity bridge to re-authenticate users with an active SSO session.

Select the Encrypt Assertion checkbox to encrypt outgoing SAML assertions.

On the Signing line:

Choose from:

From the Signing Algorithm list, select an algorithm with which to sign SAML assertions.

Select the Use Custom URLcheckbox to enter a customer URL to launch AWS from the dock.

Select the Set Up Provisioning checkbox to configure user provisioning to AWS.