Total Pageviews

Tuesday, May 18, 2021

ADFS 4 and AWS SAML integration in Gov cloud error Specified provider doesn't exist

ADFS 4 integration with AWS in gov cloud 

Specified provider doesn't exist (Service: AWSOpenIdDiscoveryService; Status Code: 400; Error Code: AuthSamlManifestNotFoundException; Request ID: b1234-5446-468b-127-e9876e; Proxy: null) (Service: AWSSecurityTokenService; Status Code: 400; Error Code: InvalidIdentityToken; Request ID: e859daed-2997-123255-b6d8-a6898723a2; Proxy: null). Please try again.


I came to know that when you use a SAML provider in AWS GovCloud (US) Regions, you should use the following URL for the XML document that contains relying party information and certificates [1]: https://signin.amazonaws-us-gov.com/static/saml-metadata.xml instead of “https://signin.aws.amazon.com/saml”

. You cant change this url with already configured relying party, it is better you create new relaying party and enter us-gov url to fix Provider doesn't exist error.