SAML AWS SSO
Follow the sections in this guide to set up AWS SSO using SAML.
Security requirements for your production environment:
- DELETE the admin default account shipped by OM.
- UPDATE the Private / Public keys used for the JWT Tokens in case it is enabled.
Create OpenMetadata application
Step 1: Configure a new Application in AWS Console
- Login to AWS Console as an administrator and search for IAM Identity Center.

- Click on
Choose your identity sourceand configure as per security requirements.

- After identity source is set up successfully, goto step 2 and click on
Manage Access to applicationand add all the required users who need access to application.

- Click on
Set up Identity Center enabled applications, and clickAdd application, and selectAdd custom SAML 2.0 application.

- Set Display Name to
OpenMetadata, and download the metadata xml file and save it someplace safe, it is needed to setup OM Server

Click on
Manage assignments to your cloud applicationsand selectOpenMetadatafrom list of applications.Click on
Actionsand selectEdit Configurationsfrom list. Populate the shown values replacinglocalhost:8585with your{domain}:{port}and Submit.

- Click on
Actionsagain and selectEdit Attribute Mappingfrom list. Populate the values as shown below and submit

Send the Collate team the above information to configure the server.