AWS IAM Role Federated
A federated role is an IAM role that trusts an external identity provider (IdP). You sign in with your corporate identity and AWS grants temporary access to the role. Freeleapp supports SAML 2.0 federation.
AWS guides for the setup on the AWS side:
Supported identity providers
Section titled “Supported identity providers”| Identity provider | AWS | Azure |
|---|---|---|
| Google Workspace | ✅ | — |
| Okta | ✅ | — |
| OneLogin | ✅ | — |
| Microsoft Entra ID | ✅ | ✅ |
| Auth0 | ✅ | — |
| Keycloak | ✅ | — |
| JumpCloud | ✅ | — |
Your provider is not listed? See the FAQ.
Create the session
Section titled “Create the session”- Click + in the top bar.
- Select Amazon AWS as the cloud provider.
- Select AWS IAM Role Federated as the access method.
- Fill in the fields below and click Create Session.
| Field | Description |
|---|---|
| Session alias | A name for the session in Freeleapp. |
| Named Profile | The profile name in ~/.aws/credentials. Use it from the AWS CLI with --profile. |
| Region | The default region for this session. |
| SAML 2.0 URL | The IdP URL that starts the sign-in flow for AWS. |
| AWS identity provider ARN | The ARN of the identity provider, under IAM › Identity providers. |
| Role ARN | The ARN of the role this session assumes. |
When you start the session and you are not signed in to your IdP, Freeleapp shows its login page. After you sign in, the session starts.