Can't Setup SSO to AWS Identity Center

Question

Hi Experts,

I am following these docs (a. MS Docs b. AWS Docs ) for setting up auto user provisioning and sso between entra and AWS Identity Center and having 2 problems -

[ 1 ] Can't SSO - After exchanging XML metadata file it gives error when testing sign in

• I downloded Metadata files as given in the above docs - followed step by step as in doc but still having error
• The user is a Member user with application assigned to him
• He has usage location - India
• 

[ 2 ] CAN'T SET UP AUTO - PROVISING

• Both Docs says to Provide Tenant URL, which I can't find anymore in Entra ID Portal it asks for ADMIN CREDENTIALS, which I am not sure where to find it in AWS :

Answer 1

@Ananay Ojha Thank you for reaching out to us, As I understand you are trying to setup sso & user provisioning with AWS IAM identity center.

From the screenshots which are provided in the query, I notice the app which you added from gallery is different than what is mentioned in our docs, I added the same app in my tenant and below is the screenshot which I see for provisioning (where as your screenshot is different )

Review step 2 in this article - https://learn.microsoft.com/en-us/entra/identity/saas-apps/aws-single-sign-on-provisioning-tutorial to get tenant url and secret details from aws identity center portal.

Review this for SSO setup - https://learn.microsoft.com/en-us/entra/identity/saas-apps/aws-single-sign-on-tutorial

Let me know if you have any further questions, feel free to post back.