aws-data-lake-solution
aws-data-lake-solution copied to clipboard
Okta federation instructions forgets to update lambda variables
The instructions for federation via Okta (Appendix B in deployment guide) updates app-variables.js variable FEDERATED_LOGIN, but does not update the lambda environment variable FEDERATED_LOGIN, which causes the wrong group source (cognito instead of custom:groups) to be used in access-validator, which causes all kinds of UI group related weirdness.
A quick fix could be to modify the cloudformation data-lake-deploy.template to pass through FederatedLogin: true to the DataLakeServicesStack only, and re-run a change-set.
Thank you for bringing the issue to our attention. We will put that item in our backlog and plan to fix it in an upcoming release.