MDAA TS Docs
    Preparing search index...

    Interface FederationProps

    interface FederationProps {
        enableEmailSyncing?: boolean;
        providerArn: string;
        roles: { [key: string]: FederationRoleProps };
        url: string;
    }

    Hierarchy (View Summary)

    Index

    Properties

    enableEmailSyncing? providerArn roles url

    Properties

    enableEmailSyncing?: boolean

    When true, adds the sts:TagSession action to the trust policy of every IAM role created for this federation, alongside the default sts:AssumeRoleWithSAML. This is the prerequisite for QuickSight "Email Syncing for Federated Users", which lets the IdP pass a user's email as a principal (session) tag via the SAML attribute PrincipalTag:Email so users are not prompted for their email on first login. The IdP claim mapping and the QuickSight account-level email-syncing setting must be configured separately, outside of MDAA.

    Use cases: QuickSight federated email syncing; IdP-driven principal tags; ABAC session tagging

    AWS: sts:TagSession trust policy action on the SAML federation role

    Validation: Optional; boolean

    false
    providerArn: string

    Arn or SSM Import (prefix with ssm:) of the federation provider

    roles: { [key: string]: FederationRoleProps }

    QS Groups and QS Role(Reader|Author) info for creating IAM Roles, Creating QS Groups, Registering Users with a QS Role

    url: string

    URL used by the connecting driver

    Settings

    Member Visibility

    On This Page

    Properties