{
  "schema_version": 2,
  "id": "operate/rc/security/access-control/saml-sso/saml-integration-aws-identity-center",
  "title": "AWS IAM Identity Center SAML integration guide",
  "url": "https://redis.io/docs/latest/operate/rc/security/access-control/saml-sso/saml-integration-aws-identity-center/",
  "summary": "This integration guide shows how to configure AWS IAM Identity Center as a SAML single sign on provider for your Redis Cloud account.",
  "tags": [
    "docs",
    "operate",
    "rc"
  ],
  "last_updated": "2026-10-01T14:41:30+01:00",
  "page_type": "content",
  "content_hash": "45feacbf008cda99d15a97ecf1e70cbb9026b869e335860169d91435aa380816",
  "sections": [
    {
      "id": "overview",
      "title": "Overview",
      "role": "overview",
      "text": "This guide shows how to configure [AWS IAM Identity Center](https://aws.amazon.com/iam/identity-center/) as a SAML single sign-on identity provider (IdP) for your Redis Cloud account.\n\nTo learn more about Redis Cloud support for SAML, see [SAML single sign-on](https://redis.io/docs/latest/operate/rc/security/access-control/saml-sso).\n\nBefore completing this guide, you must [verify ownership of any domains](https://redis.io/docs/latest/operate/rc/security/access-control/saml-sso#verify-domain) you want to associate with your SAML setup."
    },
    {
      "id": "step-1-setup-your-identity-provider-idp",
      "title": "Step 1: Setup your identity provider (IdP)",
      "role": "content",
      "text": ""
    },
    {
      "id": "create-the-aws-iam-identity-center-saml-application",
      "title": "Create the AWS IAM Identity Center SAML application",
      "role": "content",
      "text": "1. Sign in to your AWS account.\n\n1. From the main menu, search for **IAM Identity Center (successor to AWS Single Sign-On)**.\n\n    ![](https://redis.io/docs/latest/images/rc/saml/aws_iam_identity_center_saml_1.png)\n\n1. Once in IAM Identity Center, select **Applications**.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/aws_iam_identity_center_saml_2.png)\n\n1. Next, select **Add application**.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/aws_iam_identity_center_saml_3.png)\n\n1. In the next screen, select **Add custom SAML 2.0 application** then **Next**.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/aws_iam_identity_center_saml_4.png)\n\n1. The **Configure Application** screen is where you initially get the information needed to configure SAML in Redis Cloud. To begin, change the **Display name** and **Description** to **Redis Cloud**.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/aws_iam_identity_center_saml_5.png)\n\n1. Next, scroll to the **IAM Identity Center metadata** section. Here, you will find all of the information needed to configure SAML in Redis Cloud:\n\n* IAM Identity Center sign-in URL\n* IAM Identity Center SAML issuer URL\n* IAM Identity Center Certificate\n\nNote down or copy the URLs and select **Download** to download the certification information.\n\n> [!NOTE]\n> Both the IAM Identity Center sign-in URL and the IAM Identity Center SAML issuer URL are the same value. This is expected.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/aws_iam_identity_center_saml_6.png)"
    },
    {
      "id": "step-2-configure-saml-support-in-redis-cloud",
      "title": "Step 2: Configure SAML support in Redis Cloud",
      "role": "content",
      "text": "Now that you have your IAM Identity Center IdP server information, configure support for SAML in Redis Cloud."
    },
    {
      "id": "sign-in-to-redis-cloud",
      "title": "Sign in to Redis Cloud",
      "role": "content",
      "text": "Sign in to your account on the [Redis Cloud console](https://cloud.redis.io/#/login)."
    },
    {
      "id": "activate-saml-in-access-management",
      "title": "Activate SAML in Access Management",
      "role": "content",
      "text": "To activate SAML, you must have a local user (or social sign-on user) with the `owner` role. If you have the correct permissions, you will see the **Single Sign-On** tab.\n\n1. Add the information you saved previously in the **Configuration setup** screen. This includes:\n\n   * **Issuer (IdP Entity ID)**: IAM Identity Center SAML issuer URL.\n   * **IdP server URL**: IAM Identity Center sign-in URL.\n   * **Assertion signing certificate**: Drag and drop the certificate file you downloaded to disk in the form text area.\n\n     ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_1.png)\n\n   Select **Enable** and wait a few seconds for the status to change.\n\n1. Select **Download** to get the service provider (SP) metadata. Save the file to your local hard disk.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_3.png)\n\n1. Open the file in any text editor. Save the following text from the metadata:\n\n   * **EntityID** - The unique name of the service provider (SP).\n\n     ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_4.png)\n\n   * **Location** : The location of the assertion consumer service.\n\n      ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_5.png)"
    },
    {
      "id": "step-3-finish-saml-configuration-in-aws-iam-identity-centers-redis-cloud-application",
      "title": "Step 3: Finish SAML configuration in AWS IAM Identity Center's Redis Cloud Application",
      "role": "content",
      "text": "1. Return to the **Configuration setup** screen in IAM identity Center. Scroll down to the bottom of the page and select **Upload application SAML metadata file**. Select **upload** and choose the file that you downloaded in the SAML configuration screen in Redis Cloud. \n\n   ![](https://redis.io/docs/latest/images/rc/saml/aws_iam_identity_center_saml_10.png)\n\n1. If you would like to also configure an IdP initiated workflow, fill in the **relay state** field in the **Application properties** section. Use this URL: `https://cloud.redis.io/#/login/?idpId=XXXXXX`. Take the ID from the location URL in step 3 (the content after the last forward slash \"/\") and append to the URL.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/aws_iam_identity_center_saml_11.png)\n\n1. Select **Submit** to finish creating the application.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/aws_iam_identity_center_saml_12.png)\n\n1. Configure the **Redis Cloud** application's attribute mappings. Select **Actions > Edit Attribute Mappings**. \n\n   ![](https://redis.io/docs/latest/images/rc/saml/aws_iam_identity_center_saml_13.png)\n\n   In the next screen, add these attributes:\n\n   * **Subject**: `${user:email}`, `unspecified`\n   * **Email**: `${user:email}`, `unspecified`\n   * **FirstName**: `${user:givenName}`, `unspecified`\n   * **LastName**: `${user:familyName}`, `unspecified`\n   * **redisAccountMapping**: `XXXXXXX=owner`, `unspecified`\n\nThe `redisAccountMapping` key-value pair consists of the lowercase role name (owner, member, manager, billing_admin, or viewer) and your Redis Cloud Account ID found in the [account settings](https://redis.io/docs/latest/operate/rc/accounts/account-settings).\n\n![](https://redis.io/docs/latest/images/rc/saml/aws_iam_identity_center_saml_14.png)"
    },
    {
      "id": "step-4-ensure-that-the-cloud-account-user-has-an-iam-identity-center-user-account",
      "title": "Step 4: Ensure that the Cloud account user has an IAM Identity Center user account",
      "role": "content",
      "text": "To complete SAML setup, ensure that the user who began SAML configuration in Redis Cloud console has a user defined in the AWS IAM identity center. This user account is required to complete the SAML setup.\n\nAlso, make sure that the user has been assigned to the **Redis Cloud** Application."
    },
    {
      "id": "step-5-activate-saml-integration",
      "title": "Step 5: Activate SAML integration",
      "role": "content",
      "text": "The final step in our SAML integration with AWS IAM identity Center is to activate the SAML integration. \n\n1. In the Single Sign-On screen, select **Activate**.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/sm_saml_8.png)\n\n  A logout notification screen displays, letting you know that you will be redirected to your identity provider. Select **Continue** to go to the AWS IAM Identity Center's login screen.\n\n1. Enter your AWS IAM Identity Center credentials.\n\n   ![](https://redis.io/docs/latest/images/rc/saml/aws_iam_identity_center_saml_18.png)\n\nIf everything is configured correctly, you will see the the Redis Cloud console screen. Your local account is now considered a SAML account. \n\nTo log in to the Redis Cloud console from now on, click on **Sign in with SSO**.\n\n![Sign in with SSO button](https://redis.io/docs/latest/images/rc/button-sign-in-sso.png)"
    }
  ],
  "examples": []
}