Accessing Grafana through IAM Identity Center Account in Organization

There are a few potential causes for this error message when trying to sign in to Grafana using IAM Identity Center. Some possible solutions include:

1. Ensure that the IAM role that you are using to sign in to Grafana has the correct permissions.
2. Check that the IAM Identity Provider that you are using is properly configured in Grafana.
3. Check that the Grafana server is running and accessible.
4. Check the Grafana server logs for more information on the error.
5. Make sure that the IAM user you are trying to sign in with has the correct permissions in IAM.

It's important to check the grafana server log to understand more about the error, because it could be a internal error with Grafana, with the IAM role or with the IAM user.

Hi,

can somebody please let us know where to find the Grafana server log, when unable to access Grafana.

Thank you!

Manfred

We had almost exactly the same problem with our Managed Grafana instance. We changed some groups and permissions with our users in IAM Identity and only one of our users could no longer login. We received the same 500 Internal Server Error message toast.

After reviewing and comparing permissions between users, we found no differences. The solution that worked for us was to delete the user from within Grafana (but not in IAM Identity), and then login to Grafana again with that user. The user was automatically re-created in Grafana and everything is now working as expected.

Our team has searched extensively through the AWS and Grafana documents and the Github repo for Grafana, but we have not found any documentation on how AWS creates and/or syncs users when an IAM Identity (previously SSO) user logs into Managed Grafana.

GL Manfred, HTH!