Client VPN Connection Logging Not Showing Federated Username

0

I have setup AWS Client VPN using AWS SSO as an IdP and in the connection logs I am not seeing the username. I see the following. How do we get the username to populate from a federated login?

{
"connection-log-type": "connection-attempt",
"connection-attempt-status": "successful",
"connection-attempt-failure-reason": "NA",
"connection-id": "cvpn-connection-xxxxxxxxxxxx",
"client-vpn-endpoint-id": "cvpn-endpoint-xxxxxxxxxxxx",
"transport-protocol": "udp",
"connection-start-time": "2021-03-29 15:27:31",
"connection-last-update-time": "2021-03-29 15:27:31",
"client-ip": "10.250.0.162",
"username": "user:subject",
"device-type": "win",
"device-ip": "xxx.xxx.xxx.xxx",
"port": "50560",
"ingress-bytes": "0",
"egress-bytes": "0",
"ingress-packets": "0",
"egress-packets": "0",
"connection-end-time": "NA",
"connection-duration-seconds": "0"
}

jeffv74
질문됨 3년 전439회 조회
1개 답변
0

I found the issue. I did not put the correct mapping information in the SSO Attribute Mapping:

I had user:subject and it should have been ${user:subject}.

jeffv74
답변함 3년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠