Okta as Identity Provider for AWS | Identity Federation with Permissions

In this video, I walk you through integrating Okta with AWS to enable Single Sign-On (SSO) using Okta as an Identity Provider (IdP). You'll learn how to configure Okta, map users to AWS IAM roles using groups, and test logging in with different permission levels. 💡 This is useful for organizations managing AWS access using centralized identity providers. 🔧 Topics Covered: Okta SAML Setup AWS IAM Role Trust Policy Group-Based Role Mapping Testing with Different Permission Sets Required IAM User Permission { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "iam:ListRoles", "iam:ListAccountAliases" ], "Resource": "*" } ] } Role trust policy { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "Federated": "arn:aws:iam::143362307552:saml-provider/Okta" }, "Action": "sts:AssumeRoleWithSAML", "Condition": { "StringEquals": { "SAML:aud": "https://signin.aws.amazon.com/saml" } } } ] }