authentication - How to limit an AWS service to an organisation's users maintained by the Google Suite? -
i'm confused how authenticate @example.com employee, in order allow access internal service https://stage.example.com. user experience want; employee click "login google" button (preferably automatically log user in) , instantly have access based on his/her login email.
what need implement?
- something saml? https://admin.google.com/adminhome#appslist:servicetype=saml_apps
- something api credentials? https://console.developers.google.com/apis/credentials
- something aws cognito? https://ap-southeast-1.console.aws.amazon.com/cognito
- something provider ids? https://github.com/laardee/serverless-authentication-boilerplate
- something https://apis.google.com/js/platform.js & gapi.auth2's hosted_domain?
basically want away having duplicated users in aws iam. want canonical source of users in company https://admin.google.com/adminhome#userlist
the idea being, when employee leaves company, ex-employee removed , access https://stage.spuul.com & such internal services withdrawn.
aws has step step documentation explaining setup here aws & google apps federation
saml need setup
Comments
Post a Comment