Rollbar SAML.to

saml-to.yml

---
version: '20220101'
variables:
  rollbarAccount: MyProject
  awsAccountId: '01234567890'
providers:
  rollbar:
    entityId: https://saml.rollbar.com
    loginUrl: https://rollbar.com/<$= rollbarAccount $>/saml/sso/other/
    acsUrl: https://rollbar.com/<$= rollbarAccount $>/saml/sso/other/
    attributes:
      Email: <#= user.github.email #>
    provisioning:
      scim:
        endpoint: https://scim.rollbar.com # or whatever it is
        encryptedToken: ....
  aws-iam:
    entityId: https://signin.aws.amazon.com/saml
    acsUrl: https://signin.aws.amazon.com/saml
    attributes:
      https://aws.amazon.com/SAML/Attributes/RoleSessionName: '<#= user.github.login #>'
      https://aws.amazon.com/SAML/Attributes/SessionDuration: '3600'
      https://aws.amazon.com/SAML/Attributes/Role: '<#= user.selectedRole #>,arn:aws:iam::<$= awsAccountId $>:saml-provider/saml.to'
permissions:
  rollbar:
    users:
      github:
        - cnuss
        - brianr
  aws-iam:
    roles:
      - name: arn:aws:iam::<$= awsAccountId $>:role/admin
        users:
          github:
            - brianr
            - cnuss
            - tonystark