You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Apr 8, 2026. It is now read-only.
The instructions for federation via Okta (Appendix B in deployment guide) updates app-variables.js variable FEDERATED_LOGIN, but does not update the lambda environment variable FEDERATED_LOGIN, which causes the wrong group source (cognito instead of custom:groups) to be used in access-validator, which causes all kinds of UI group related weirdness.
A quick fix could be to modify the cloudformation data-lake-deploy.template to pass through FederatedLogin: true to the DataLakeServicesStack only, and re-run a change-set.
The instructions for federation via Okta (Appendix B in deployment guide) updates app-variables.js variable FEDERATED_LOGIN, but does not update the lambda environment variable FEDERATED_LOGIN, which causes the wrong group source (cognito instead of custom:groups) to be used in access-validator, which causes all kinds of UI group related weirdness.
A quick fix could be to modify the cloudformation data-lake-deploy.template to pass through FederatedLogin: true to the DataLakeServicesStack only, and re-run a change-set.