Configure Federated Authentication | Vantage on AWS - Configuring Federated Authentication - Teradata Vantage on AWS

Teradata Vantageā„¢ on AWS Getting Started Guide

Teradata Vantage on AWS
Release Number
March 2022
English (United States)
Last Update
Product Category
To enable SSO capabilities, you must first submit a change request form.
For self-service configuration, you must first complete the SSO configuration steps found in the Teradata Vantageā„¢ - Advanced SQL Engine Security Administration guide before continuing with enabling SSO capabilities.
Teradata sends you an email about enabling the SSO capabilities using the Federated Authentication feature. To configure, complete the tasks described in the email and have the following information available:
  • Domain
  • Provider URL
  • Claims
  1. Use the link in the onboarding email to access the Identity configuration interface.
  2. Use the link in the onboarding email to reset your password.
  3. After a password reset, complete the multi-factor authentication (MFA) flow using the pass code sent to your email.
    This is the same email address you used to log into Vantage Console.
  4. Select "" to access the IdP form.
    If you are unable to view the IdP icon in the Dashboard, contact your system security or cloud administrator. Only an administrator with root privileges can view the identity icon.
  5. In the Settings section of the IdP form, enter a unique Name for the IdP configuration.
  6. Enter the Domain of the email client, for example,
  7. Use the menu to select the SSO protocol.
    Selections are: OpenID Connect or SAML 2.0.
  8. In the Claims section, enter the email attributes to establish user mapping.
    Field Description
    subject Enter a subject mapped to the SSO Protocol.
    user_name Enter the username of the login created for the user in Vantage.
    name Enter a display name.
    firstName Enter first name of the user.
    lastName Enter last name of the user.
    email Enter the email of the user.
  9. Select Save.