Create a data source with SAML authentication

Enable the Database Tools and SQL plugin

This functionality relies on the Database Tools and SQL plugin, which is bundled and enabled in GoLand by default. If the relevant features are not available, make sure that you did not disable the plugin.

1. Press Ctrl+Alt+S to open settings and then select Plugins.

2. Open the Installed tab, find the Database Tools and SQL plugin, and select the checkbox next to the plugin name.

Official documentation

• For full information about Amazon Redshift, refer to the official documentation.

• For more versions of Amazon Redshift JDBC driver, refer to the official JDBC driver downloads.

• Amazon Redshift identity federation with multi-factor authentication

Create a data source

1. In the Database tool window, click New on the toolbar and navigate to Data Source | Amazon Redshift.

   

2. Check if there is a Download missing driver files link at the bottom of the connection settings area. Click this link to download drivers that are required to interact with a database. For a direct download link, refer to the JetBrains JDBC drivers page.

   

3. Specify the database connection details.

   1. In the Host field, type the port number. For example, examplecluster.abc123xyz789.us-west-2.redshift.amazonaws.com.

   2. In the Port field, type the URL to connect to your Amazon Redshift account with. In our case, it is 5439.

   3. Leave the User and Password fields empty.

   4. In the Database field, type the database name to which you want to connect. In our case, the database is dev.

   5. To the end of autogenerated URL in the JDBC URL field, add ? and the following properties separated with &:

      • plugin_name=<credentials_provider_class_name>: the SAML-based credential provider plugin you use for authentication. In this tutorial, we will use the Browser SAML plugin that can work with SAML-based identity providers: plugin_name=com.amazon.redshift.plugin.BrowserSamlCredentialsProvider.

      • login_url=<login_url>: the identity provider URL. In our case, it is the URL to the JumpCloud login page: login_url=https://sso.jumpcloud.com/saml2/awsredshift.

   So, our JDBC URL is as follows:

   jdbc:redshift:iam://examplecluster.abc123xyz789.us-west-2.redshift.amazonaws.com:5439/dev?plugin_name=com.amazon.redshift.plugin.BrowserSamlCredentialsProvider&login_url=https://sso.jumpcloud.com/saml2/awsredshift

   Alternatively, type your JDBC URL in the URL field. The general URL to use is as follows:

   • Format:

     jdbc:redshift:iam://<cluster_name>.<additional_unique_identifier>.<cluster_region>.redshift.amazonaws.com:<port_number>/dev?plugin_name=<plugin_name>&login_url=<login_url>&user=<username>&password=<password>

   • Example,:

     jdbc:redshift:iam://examplecluster.abc123xyz789.us-west-2.redshift.amazonaws.com:5439/dev?plugin_name=com.amazon.redshift.plugin.BrowserSamlCredentialsProvider&login_url=https://sso.jumpcloud.com/saml2/awsredshift&user=my_username&password=dummy_password

4. Click the Test Connection link at the bottom of the connection details area to initiate a test connection to your database.

   

5. On the JumpCloud website that opens in the browser, enter your user credentials and log in to your JumpCloud account.

   

6. Once JumpCloud confirms your identity, return to GoLand.

   

7. In the IDE, click OK to save your new data source.