OpenSearch Saml SP-initiated login through IAM Identity Center SSO

Hello,

Thank you for your inquiry regarding SP-Initiated Login to OpenSearch with IAM Identity Center SSO.

To enable SP-Initiated Login, follow these steps:

1. Configure IdP in IAM Identity Center: Ensure you've configured the IAM Identity Center as an Identity Provider (IdP) for OpenSearch as described in the documentation.

2. Configure OpenSearch for SAML: Follow the steps outlined in the OpenSearch documentation to configure OpenSearch for SAML-based authentication.

3. IdP Metadata: Ensure you provide the necessary Identity Provider (IdP) metadata to OpenSearch, which includes SAML endpoints and keys. More information can be found in the SAML Configuration for OpenSearch section.

4. Test SP-Initiated Login: Once configured, initiate the SP-Initiated Login from your Identity Center's SSO page and ensure the flow works as expected. If any issues are encountered, refer to the troubleshooting section of the documentation for guidance.

5. Additional Reference Documentation: https://aws.amazon.com/blogs/big-data/role-based-access-control-in-amazon-opensearch-service-via-saml-integration-with-aws-iam-identity-center/

Please response if you have any more questions!