@@ -99,6 +99,7 @@ Click **Add application**.
9999Choose ** I have an application I want to set up** and select ** SAML 2.0** .
100100
101101![ Choose SAML 2.0] ( /static/images/client-vpn-sso/image-2.png )
102+
102103![ Choose SAML 2.0 Confirmation] ( /static/images/client-vpn-sso/image-3.png )
103104
104105Set:
@@ -138,6 +139,7 @@ Open **Actions -> Edit attribute mappings** and add:
138139- ` memberOf ` -> ` \${user:groups} ` with type ` unspecified `
139140
140141![ Edit Attribute Mappings] ( /static/images/client-vpn-sso/image-8.png )
142+
141143![ Client VPN Attribute Mappings] ( /static/images/client-vpn-sso/image-9.png )
142144
143145Checkpoint: Your ` Client VPN ` SAML app exists with the two mappings above.
154156- Description: ` Application for AWS Client VPN self service portal authenticated with SSO `
155157
156158![ Self Service App Config] ( /static/images/client-vpn-sso/image-10.png )
159+
157160![ Self Service App Config 2] ( /static/images/client-vpn-sso/image-11.png )
158161
159162Use the same IP stack (IPv4 in this guide) and download this app's SAML metadata file as well.
@@ -184,6 +187,7 @@ Add the same attribute mappings as Step 1:
184187- ` memberOf ` -> ` \${user:groups} ` type ` unspecified `
185188
186189![ Self Service Edit Mapping] ( /static/images/client-vpn-sso/image-14.png )
190+
187191![ Self Service Attribute Mapping Values] ( /static/images/client-vpn-sso/image-15.png )
188192
189193Checkpoint: Both SAML apps are created and mapped consistently.
@@ -247,11 +251,17 @@ Recommended endpoint settings:
247251 - Disconnect on session timeout enabled
248252
249253![ Endpoint Config 1] ( /static/images/client-vpn-sso/image-20.png )
254+
250255![ Endpoint Config 2] ( /static/images/client-vpn-sso/image-21.png )
256+
251257![ Endpoint Config 3] ( /static/images/client-vpn-sso/image-22.png )
258+
252259![ Endpoint Config 4] ( /static/images/client-vpn-sso/image-23.png )
260+
253261![ Endpoint Config 5] ( /static/images/client-vpn-sso/image-24.png )
262+
254263![ Endpoint Config 6] ( /static/images/client-vpn-sso/image-25.png )
264+
255265![ Endpoint Config 7] ( /static/images/client-vpn-sso/image-26.png )
256266
257267Create the endpoint. It starts in ` pending ` state.
@@ -281,6 +291,7 @@ Checkpoint: At least one subnet association is active.
281291In IAM Identity Center, create a group for VPN users.
282292
283293![ Create Group Start] ( /static/images/client-vpn-sso/image-29.png )
294+
284295![ Create Group Details] ( /static/images/client-vpn-sso/image-30.png )
285296
286297Open the group and copy its group ID.
0 commit comments