AWS VPN Client - ADFS federation

Question

Is it possible to use ADFS to federate with AWS VPN client? If it is possible, how can the setup for the Assertion Consumer Service (ACS) URL: http://127.0.0.1:35001 be configured in ADFS as it seems that ADFS only support https. thanks.

Answer

Hi,

Please be advised that currently, AWS Client VPN only supports HTTP Assertion Consumer Service (ACS) URL (and not HTTPS) [1], which leads to interoperability issues with IdPs that require "https://127.0.0.1:35001". So Client VPN will not support using ADFS for federated authentication because ADFS only supports HTTPS ACS.

There is already a feature request for this, however no confirm ETA on it. Once announced you will see it here:

What's New: http://aws.amazon.com/new/

[1] https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/client-authentication.html#saml-config-resources

AWS VPN Client - ADFS federation

相关内容