{"id":39669984,"url":"https://github.com/cevoaustralia/cfn-identity-provider","last_synced_at":"2026-01-18T09:36:40.843Z","repository":{"id":47906525,"uuid":"89431579","full_name":"cevoaustralia/cfn-identity-provider","owner":"cevoaustralia","description":"A trivially simple stack to create an AWS IAM SAML provider via CloudFormation","archived":false,"fork":false,"pushed_at":"2020-03-11T02:34:36.000Z","size":6,"stargazers_count":41,"open_issues_count":6,"forks_count":30,"subscribers_count":9,"default_branch":"master","last_synced_at":"2024-04-20T00:47:54.907Z","etag":null,"topics":["aws-lambda","cloudformation","cloudformation-template","custom-resources","identity-provider","saml","saml-metadata"],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cevoaustralia.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-04-26T03:02:57.000Z","updated_at":"2022-12-11T01:39:23.000Z","dependencies_parsed_at":"2022-09-13T14:50:56.895Z","dependency_job_id":null,"html_url":"https://github.com/cevoaustralia/cfn-identity-provider","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/cevoaustralia/cfn-identity-provider","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cevoaustralia%2Fcfn-identity-provider","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cevoaustralia%2Fcfn-identity-provider/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cevoaustralia%2Fcfn-identity-provider/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cevoaustralia%2Fcfn-identity-provider/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cevoaustralia","download_url":"https://codeload.github.com/cevoaustralia/cfn-identity-provider/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cevoaustralia%2Fcfn-identity-provider/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28534168,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-18T00:39:45.795Z","status":"online","status_checked_at":"2026-01-18T02:00:07.578Z","response_time":98,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws-lambda","cloudformation","cloudformation-template","custom-resources","identity-provider","saml","saml-metadata"],"created_at":"2026-01-18T09:36:40.731Z","updated_at":"2026-01-18T09:36:40.829Z","avatar_url":"https://github.com/cevoaustralia.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# A simple SAML Identity Provider (IdP) provisioner\n\nThis CloudFormation template creates a SAML identity provider in Amazon Web Services' (AWS) Identity and Access\nManagement (IAM) configuration.\n\nIn order to use it, you'll need:\n\n* an AWS account\n* rights within that AWS account to create, update, and delete:\n    * CloudFormation stacks\n    * IAM Roles and Policies\n    * Lambda functions\n    * Identity Providers\n* a SAML Identity Provider (IdP)\n* the Federation metadata (an XML document) from the Identity Provider (how to get this differs for every IdP)\n\n## Preparing metadata\n\n1. Download metadata from your IdP\n1. Make it all be on one line and escape the double-quote (`\"`) character:\n   `tr -d '\\n' metadata.xml | sed -e 's/\"/\\\"/g' \u003e out.xml`\n1. Copy the `out.xml` into the `ParameterValue` field of the `params.json`\n\n## Configuration\n\nYou can set the name of your identity provider via the `SamlProviderName` parameter to the stack; this can be\nconfigured in the `params.json`. It defaults to `MyProvider`\n\n## Returned Values from the Custom Resource\n\nThe `ProviderCreator` custom resource returns the ARN of the SAML provider as its physical resource ID.\n\nYou can simply `Ref` the custom resource to use the SAML provider ARN.\n\nFor example:\n\n```yaml\n...\n\n  TrustingIdp:\n    Type: AWS::IAM::Role\n    Properties:\n      AssumeRolePolicyDocument:\n        Version: '2012-10-17'\n        Statement:\n          - Effect: Allow\n            Principal:\n              Federated: !Ref IdentityProvider\n            Action: sts:AssumeRoleWithSAML\n            Condition:\n              StringEquals:\n                \"SAML:aud\": \"https://signin.aws.amazon.com/saml\"\n...\n```\n\n## Updating the stack\n\nThe stack can be updated, though the only changes you can make to the Identity Provider is to change the SAML\nMetadata document, in case you need to update the trust relationship.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcevoaustralia%2Fcfn-identity-provider","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcevoaustralia%2Fcfn-identity-provider","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcevoaustralia%2Fcfn-identity-provider/lists"}