AWS recommends overriding the IdP's Assertion Consumer Service URL from the global sign-in endpoint (hosted in US East) to https://{region-id}.signin.aws.amazon.com/saml for the instance's Region, and adding that URL to a multivalued SAML:aud condition in the role trust policy.

Checked 2026-09-30

Vendor
Amazon Web Services
Product
Amazon Connect Customer
Subsystem
SAML federation
Deployment
multi-tenant
Region
not restricted
Release range
current as of 2026-09-30
Checked
2026-09-30

Sources

Cite this note

APA

WarmTransfer. (2026, September 30). Setting up an Amazon Connect instance: source note amazon-connect-instance-setup-saml-regional-acs. WarmTransfer. https://warmtransfer.net/knowledge/claims/amazon-connect-instance-setup-saml-regional-acs

BibTeX

@misc{warmtransfer-claim-amazon-connect-instance-setup-saml-regional-acs,
  title  = {Setting up an Amazon Connect instance: source note amazon-connect-instance-setup-saml-regional-acs},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/amazon-connect-instance-setup-saml-regional-acs},
  note   = {Source note amazon-connect-instance-setup-saml-regional-acs, checked 2026-09-30}
}

Read in context