AWS.STS.TSTSClient.AssumeRoleWithSAML

Request a set of temporary security credentials for users who have been authenticated via a SAML authentication response.

function AssumeRoleWithSAML(const ARequest: ISTSAssumeRoleWithSAMLRequest): ISTSAssumeRoleWithSAMLResponse; overload; function AssumeRoleWithSAML(const ARoleArn: TARN; const APrincipalArn: TARN; const ASAMLAssertion: string): ISTSAssumeRoleWithSAMLResponse; overload;
__fastcall ISTSAssumeRoleWithSAMLResponse AssumeRoleWithSAML(const ISTSAssumeRoleWithSAMLRequest ARequest); __fastcall ISTSAssumeRoleWithSAMLResponse AssumeRoleWithSAML(const TARN ARoleArn, const TARN APrincipalArn, const AnsiString ASAMLAssertion);

File: AWS.STS.pas 

Namespace: AWS.STS 

Module: Appercept AWS SDK for Delphi 

Parameters
Description
const ARequest: ISTSAssumeRoleWithSAMLRequest
An AssumeRoleWithSAML request object.
const ARoleArn: TARN
The Amazon Resource Name (ARN) of the role to assume.
const APrincipalArn: TARN
The Amazon Resource Name (ARN) of the SAML provider in IAM that describes the IdP.
const ASAMLAssertion: string
The Base64 encoded SAML authentication response provided by the IdP.

Response containing AssumeRoleWithSAML results.

Exceptions
Description
The web identity that was passed is expired or invalid.
The Identity Provider (IdP) reported that the authentication failed. This may be because the claim is invalid.
The web identity token provided could not be validated by AWS.
The request was rejected because the policy document was malformed.
The request was rejected beacuse the total packed size of the session policies and tags combined was too large.
AWS STS is not activated in the region for the account being asked to generate credentials.
Copyright © 2019-2021 Appercept Ltd. All rights reserved.