Skip to Content
How-to guidesSet package settings

Set package settings for your organization

Enter the AWS SSO start URL and region once, and everyone in your organization connects AWS with a single click on Continue. They see the values filled in and locked, so nobody mistypes them or signs in to the wrong place. You need the owner or admin role.

Steps

  1. Open the organization menu in the top bar and choose Organization settings.
  2. Open Configuration.
  3. Scroll to Package settings. Each installed package that has settings shows a card. Find AWS.
  4. Enter the SSO start URL, the address of your AWS access portal, for example https://acme.awsapps.com/start. The https://ssoins-... portal addresses that IAM Identity Center shows also work. See Connect AWS with SSO for every form.
  5. Enter the SSO region, the AWS region where IAM Identity Center is set up, for example us-east-1.
  6. Click Save on the card.

Marshal checks the start URL before it saves. If a value does not look right, the card tells you which one to fix. To clear a value, empty the field and click Save. People can type the value again when it is empty.

What people see

When someone opens Connections and connects AWS with Sign in with AWS SSO, the SSO start URL and SSO region are already filled in and locked. They click Continue, approve the code, and pick an account and a role. See Connect AWS with SSO.

Every member of your organization can see these values, because the connect dialog shows them. Package settings hold values that are not secret, such as an address or a region. They never reach a space or a tool.

What changes when you edit a value

  • Existing connections stay as they are. A connection keeps the start URL and region it was made with.
  • The next sign-in uses the new values. Anyone who connects, or reconnects after their sign-in ended, gets the value you saved last.

To move everyone to a new start URL, save it here, then ask people to reconnect from Connections.

What you should see

  • A Saved line on the card after you click Save.
  • The new values locked in the Connect AWS dialog the next time someone opens it.
  • An audit log entry named org.package_setting_update with the package, the setting, and the old and new values. See Read the audit log.
Connect AWS with SSOCreate a manifest