# Create a data source with SAML authentication

Last modified: 28 October 2025

### Enable the Database Tools and SQL plugin

This functionality relies on the Database Tools and SQL plugin, which is bundled and enabled in IntelliJ IDEA by default. If the relevant features are not available, make sure that you did not disable the plugin.

> ### note  
> Database Tools and SQL functionality support is limited in IntelliJ IDEA without the Ultimate subscription.

1. Press `Ctrl`  `Alt`  `0S` to open settings and then select Plugins.
2. Open the Installed tab, find the Database Tools and SQL plugin, and select the checkbox next to the plugin name.

### Official documentation

- For full information about Amazon Redshift, refer to [the official documentation](https://docs.aws.amazon.com/redshift/index.html).
- For more versions of Amazon Redshift JDBC driver, refer to [the official JDBC driver downloads](https://docs.aws.amazon.com/redshift/latest/mgmt/jdbc20-download-driver.html).
- [Amazon Redshift identity federation with multi-factor authentication](https://aws.amazon.com/blogs/big-data/amazon-redshift-identity-federation-with-multi-factor-authentication/)

In this tutorial, we will create an Amazon Redshift data source, configure it to use SAML authentication with JumpCloud identity provider, and run a test connection to a database.

For more information about the integration and connection settings, refer to the following pages:
- [Options for providing IAM credentials at Amazon Redshift Docs](https://docs.aws.amazon.com/redshift/latest/mgmt/options-for-providing-iam-credentials.html)
- [Integrate with Amazon Redshift at jumpcoud.com](https://jumpcloud.com/support/integrate-with-amazon-redshift)

## Prerequisites

- Your Amazon Redshift dashboard must have an Amazon Redshift cluster in it. For more information about the Amazon Redshift cluster, refer to [Getting Started with Amazon Redshift.](https://docs.aws.amazon.com/redshift/latest/gsg/getting-started.html)
- [AWS SSO](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html) has to be enabled for your AWS account.
- Your AWS account has to be [linked to your JumpCloud account](https://docs.aws.amazon.com/singlesignon/latest/userguide/tutorials.html).

### Create a data source

1. In the Database tool window, click  New on the toolbar and navigate to Data Source | Amazon Redshift.
   
2. Check if there is a Download missing driver files link at the bottom of the connection settings area. Click this link to download drivers that are required to interact with a database. For a direct download link, refer to the [JetBrains JDBC drivers](/content/datagrip/jdbc-drivers/index.html) page.
   
3. Specify the database connection details.

1. In the Host field, type the URL to connect to your Redis account with. For example, `examplecluster.abc123xyz789.us-west-2.redshift.amazonaws.com`.
   2. In the Port field, type the port number. In our case, it is `5439`.
   3. Leave the User and Password fields empty.
   
        > ### tip  
        > You can set the Password field empty by right-clicking it and selecting Set Empty.
        >

4. In the Database field, type the database name to which you want to connect. In our case, the database is `dev`.
   5. To the end of autogenerated URL in the JDBC URL field, add `?` and the following properties separated with `&`:

- `plugin_name=<credentials_provider_class_name>`: the [SAML-based credential provider plugin](https://docs.aws.amazon.com/redshift/latest/mgmt/options-for-providing-iam-credentials.html#using-credentials-provider-plugin) you use for authentication. In this tutorial, we will use the Browser SAML plugin that can work with SAML-based identity providers: `plugin_name=com.amazon.redshift.plugin.BrowserSamlCredentialsProvider`.

- `login_url=<login_url>`: the identity provider URL. In our case, it is the URL to the JumpCloud login page: `login_url=https://sso.jumpcloud.com/saml2/awsredshift`.

> ### tip  
   > To ensure enough time is provided for authorization, you can set the duration before the JDBC driver stops waiting for the SAML response. To do this, use the `idp_response_timeout=<X>` property. For example, use `idp_response_timeout=60` to set 60 seconds.

So, our JDBC URL is as follows:

`jdbc:redshift:iam://examplecluster.abc123xyz789.us-west-2.redshift.amazonaws.com:5439/dev?plugin_name=com.amazon.redshift.plugin.BrowserSamlCredentialsProvider&login_url=https://sso.jumpcloud.com/saml2/awsredshift`

Alternatively, type your JDBC URL in the URL field. The general URL to use is as follows:

- Format:
     
     `jdbc:redshift:iam://<cluster_name>.<additional_unique_identifier>.<cluster_region>.redshift.amazonaws.com:<port_number>/dev?plugin_name=<plugin_name>&login_url=<login_url>&user=<username>&password=<password>`

- Example:
     
     `jdbc:redshift:iam://examplecluster.abc123xyz789.us-west-2.redshift.amazonaws.com:5439/dev?plugin_name=com.amazon.redshift.plugin.BrowserSamlCredentialsProvider&login_url=https://sso.jumpcloud.com/saml2/awsredshift&user=my_username&password=dummy_password`

4. Click the Test Connection link at the bottom of the connection details area to initiate a test connection to your database.
   
5. On the JumpCloud website that opens in the browser, enter your user credentials and log in to your JumpCloud account.
   
6. Once JumpCloud confirms your identity, return to IntelliJ IDEA.
   
7. In the IDE, click OK to save your new data source.