Next, Ensure the Keeper application attributes that are to be mapped to AWS SSO are correct (These should be set by default. Select the Attribute mappings tab.
The AWS string value to ${user:subject} and format is blank or unspecified.
The Keeper Attributes are set as follows: