|
1 | | ---- |
| 1 | +--- |
2 | 2 | title: 'AWS Client VPN with SSO (Interactive Setup Guide)' |
3 | 3 | date: '2026-03-13' |
4 | 4 | tags: ['aws', 'client-vpn', 'sso', 'iam-identity-center', 'network-security'] |
5 | 5 | draft: false |
6 | 6 | layout: PostSimple |
7 | | -summary: 'Set up AWS Client VPN with IAM Identity Center SSO, including self-service portal, SAML providers, group-based authorization, and end-user connection flow.' |
| 7 | +summary: 'Interactive guide to set up AWS Client VPN with IAM Identity Center SSO.' |
8 | 8 | --- |
9 | 9 |
|
10 | 10 | AWS Client VPN is a managed, OpenVPN-based remote access service that lets users securely connect to private AWS networks from anywhere. It is designed for teams that need controlled access to internal workloads without exposing private resources directly to the internet. |
@@ -134,8 +134,8 @@ Leave **Application Start URL** and **Relay State** empty for now, then submit. |
134 | 134 |
|
135 | 135 | Open **Actions -> Edit attribute mappings** and add: |
136 | 136 |
|
137 | | -- Subject -> ${user:email} with type `emailAddress` |
138 | | -- `memberOf` -> `${user:groups}` with type `unspecified` |
| 137 | +- Subject -> `\${user:email}` with type `emailAddress` |
| 138 | +- `memberOf` -> `\${user:groups}` with type `unspecified` |
139 | 139 |
|
140 | 140 |  |
141 | 141 |  |
@@ -180,8 +180,8 @@ Submit. |
180 | 180 |
|
181 | 181 | Add the same attribute mappings as Step 1: |
182 | 182 |
|
183 | | -- Subject -> `${user:email}` type `emailAddress` |
184 | | -- `memberOf` -> `${user:groups}` type `unspecified` |
| 183 | +- Subject -> `\${user:email}` type `emailAddress` |
| 184 | +- `memberOf` -> `\${user:groups}` type `unspecified` |
185 | 185 |
|
186 | 186 |  |
187 | 187 |  |
|
0 commit comments