Setting up SAML based single sign-on (SSO) with Amazon FinSpace

Important

Amazon FinSpace Dataset Browser will be discontinued on March 26, 2025. Starting November 29, 2023, FinSpace will no longer accept the creation of new Dataset Browser environments. Customers using Amazon FinSpace with Managed Kdb Insights will not be affected. For more information, review the FAQ or contact AWS Support to assist with your transition.

When you use SAML based SSO, you can manage users with your enterprise identity provider (IdP). You can use a third-party identity provider that supports through Security Assertion Markup Language 2.0 (SAML 2.0) to provide a simple on-boarding flow for your Amazon FinSpace users. Such identity providers include Microsoft Windows Active Directory Federation Services and Okta among others.

With SSO, your users get one-click access to their FinSpace applications using their existing identity credentials. You also have the security benefit of identity authentication by your identity provider. You can control which users have access to FinSpace using your existing identity provider.

Topics

• Tutorial: Setup an Identity Provider with your Amazon FinSpace environment
• Tutorial: Creating an Amazon FinSpace environment with Okta SSO
• Tutorial: Creating an Amazon FinSpace environment with IAM Identity Center
• Tutorial: Creating an Amazon FinSpace environment with AD FS