Use an attribute for enabling RDS/Aurora SSO (IAM) access

[tmylonidis]

Hi,

we are trying to enable IAM authentication for our Aurora databases. In order to do that, there has to be a 1-on-1 mapping between one of the attributes coming from the IdP and the database usernames. There is a guide on how to do so.

Since using the nickName attribute is not available, is there any other option apart from tweaking the userName format to be lowercase(givenName_familyName)? We can't use the primaryEmail as the database username due to Postgres limitations on certain characters (dots and @s in our case).

Thanks!