Giters

aws / aws-parallelcluster

AWS ParallelCluster is an AWS supported Open Source cluster management tool to deploy and manage HPC clusters in the AWS cloud.

Home Page:https://github.com/aws/aws-parallelcluster

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Redundant step required for PCluster UI to AWS Identity Center integration

alfred-stokespace opened this issue · comments

commented

VERSION: Doesn't matter, this behavior is stated in documentation.

I've recently completed a successful integration of the following...

  1. My organization's Identity Provider of choice (I won't be sharing that publicly)
    1. with user/group provisioning
  2. AWS Identity Center
    1. receiving user/group provisioning
  3. Identity Center application integration to PCluster UI

And I discovered at the very end of the process that there is a manual step that must be performed every "first-time" login for a user attempting to log in to PCluster UI.

EXISTING BEHAVIOR:
You can see this manual step called out in this doc https://docs.aws.amazon.com/parallelcluster/latest/ug/tutorials_10_pcui-aws-ic-integration-v3.html
See sub-section heading "Make your user an administrator" of section "Adding your Application to IAM Identity Center"
image

There you can see that a user must have another user assign them "Admin" before being able to do anything with the UI. Despite the care taken higher up the chain to use the advanced features of IDP and Identity center to automatically place a user in a group, I still need to have a manual process in my org to allow the user to do anything.

DESIRED BEHAVIOR: A user that signs in through the IdentityCenter integration should not have to require another user to add them as an admin. They should be able to use the PCluster UI as soon as they complete sign in with IDP and are returned to the SP site.