AWS::Grafana::Workspace SamlConfiguration - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::Grafana::Workspace SamlConfiguration

A structure containing information about how this workspace works with SAML.


To declare this entity in your Amazon CloudFormation template, use the following syntax:



Lists which organizations defined in the SAML assertion are allowed to use the Amazon Managed Grafana workspace. If this is empty, all organizations in the assertion attribute have access.

Required: No

Type: Array of String

Minimum: 1

Maximum: 256

Update requires: No interruption


A structure that defines which attributes in the SAML assertion are to be used to define information about the users authenticated by that IdP to use the workspace.

Required: No

Type: AssertionAttributes

Update requires: No interruption


A structure containing the identity provider (IdP) metadata used to integrate the identity provider with this workspace.

Required: Yes

Type: IdpMetadata

Update requires: No interruption


How long a sign-on session by a SAML user is valid, before the user has to sign on again.

Required: No

Type: Number

Update requires: No interruption


A structure containing arrays that map group names in the SAML assertion to the Grafana Admin and Editor roles in the workspace.

Required: No

Type: RoleValues

Update requires: No interruption