Amazon Cognito: SAML federation, IdP-initiated Login, and SAML Encryption

Поделиться
HTML-код
  • Опубликовано: 19 янв 2025

Комментарии • 33

  • @yuvasp
    @yuvasp 10 месяцев назад +4

    How to generate relay state url ? Is there any format ? Please share

    • @brianji1068
      @brianji1068 9 месяцев назад +1

      This drove me nuts all afternoon, just figured it out...

    • @yuvasp
      @yuvasp 9 месяцев назад

      @@brianji1068 finally
      client_id=xxx&identity_provider=xx&scope=xxx&response_type=code&redirect_uri=redirecturl

    • @zachfoster3643
      @zachfoster3643 9 месяцев назад

      @@brianji1068what was the solution?

    • @Priva_C
      @Priva_C 4 месяца назад

      @@brianji1068👀 please share

  • @GEDev-th6rs
    @GEDev-th6rs 8 месяцев назад +2

    Thanks for nice and easy demo video. Is it possible to share the Express JS client test app.

    • @awssupport
      @awssupport 8 месяцев назад

      Hi. 👋 Resources used in this video can be found at timestamp 5:45. 📼 If you'd like, you can learn more about this topic, by following this link: go.aws/3WHVOsG. 🔖 ^SA

    • @GEDev-th6rs
      @GEDev-th6rs 8 месяцев назад +1

      @@awssupport Thanks for the reply. I was asking the Express JS application used as client app at time stamp 10:16
      ruclips.net/video/1vYUt2u2EB0/видео.html

    • @ryanshillington4576
      @ryanshillington4576 Месяц назад

      Yeah. Where is the code for that? My application doesn't know how to convert the "Code" provided to a JWT token.

  • @kellymoses8566
    @kellymoses8566 11 месяцев назад +1

    Is it possible to backup user passwords to another region yet? This has been a major limitation of Cognito since it was first released.

    • @awssupport
      @awssupport 11 месяцев назад

      Apologies for any inconvenience, Kelly. Unfortunately, AWS Cognito doesn't currently have multi-region support. We are always looking to improve our services & If you'd like, you can share this as feedback directly to our service teams using these options: go.aws/feedback. 💭 ^RN

  • @harryzachariou1
    @harryzachariou1 10 месяцев назад

    What happens when you want to sign out and force the user to re-input their login credentials on the idp side, I've configured this and it seems that when logging out the SSO session is still cached some how and the expiration of the SSO app session and cognito JWT tokens are mismatched.

    • @awssupport
      @awssupport 10 месяцев назад +2

      Apologies for the trouble! This doc might point you in the right direction for help: go.aws/3PaxRpp. You can also ask our community of experts this question on re:Post, for more technical insight and support: go.aws/aws-repost. ⬅️ ^AD

  • @somedayitsgonnamakesense
    @somedayitsgonnamakesense Месяц назад

    lets say i have an application in a private subnet, in user authentication, it will fetch the user data in a separate on-prem server where credentials are stored running in windows. i want to integrate the on-prem IDP to AWS Cognito. is it possible?

    • @awssupport
      @awssupport Месяц назад

      Great question! Our community of experts in re:Post may have a solution for your ask, feel free to share your thoughts here: go.aws/aws-repost. 👈 ^LG

  • @akashkumar2990
    @akashkumar2990 11 месяцев назад

    I have existing user pool , i want to intergrated SAML based login. Do I need external Idps?

    • @awssupport
      @awssupport 11 месяцев назад

      Hi there, this doc may be of use to you: go.aws/3SDVVlB. If you need additional assistance, you can also hop on our AWS re:Post: go.aws/aws-repost. re:Post is a place where you can view and possibly post to our AWS industry experts for help with your needs. 🧠 ^DC

  • @aashishnagpal9907
    @aashishnagpal9907 3 месяца назад

    I have existing user pool , i want to intergrated SAML based login. while login should not create a new user in user pool instead map to existing user on email id

    • @awssupport
      @awssupport 3 месяца назад

      Hi there! Our community of experts over at re:Post may be able to provide additional guidance on this one. Feel welcome to share more info with them about your use case, here: go.aws/aws-repost. ^KS

  • @JanreyCablinda
    @JanreyCablinda 6 месяцев назад

    Awesome! is that possible to share us the Express JS syntax? Thank you!

    • @awssupport
      @awssupport 6 месяцев назад

      Hi Janrey! SAML federation can be performed using browser only, there is no Cognito SDK or AWS JS SDK to support SAML federation using code. An end user is needed to interact. You just need to show a button in your app (with text "Login with SAML") which your end-users can click; and then the user will be redirected to Cognito hosted UI endpoint or SAML endpoint depending on whether customer using SP-initiated federation or IdP-initiated federation. For further discussion around this, please reach out on re:Post: go.aws/aws-repost. 😀 ^ES

    • @JanreyCablinda
      @JanreyCablinda 6 месяцев назад

      @@awssupport Thank you for your response. Could you share an example implementation with the federation code applied?

    • @awssupport
      @awssupport 6 месяцев назад

      It's a pleasure. 😀 While we don't have an example of the applied federation code available as yet, we've submitted your question for internal review. 🔎 ^ZP

    • @JanreyCablinda
      @JanreyCablinda 6 месяцев назад

      @@awssupport Amazing! 😀 Please let me know if you already have 🙏

    • @awssupport
      @awssupport 6 месяцев назад

      Good news! Our team provided these GitHub resources. One will take you to a code repo and the other to test the authorization code for tokens: go.aws/464YJyt & go.aws/46aPlJA. 🔗 For further technical questions, we suggest reaching out to our free community of helpful engineers at re:Post: go.aws/aws-repost. ✍️ ^ZP

  • @MrHarry2303
    @MrHarry2303 7 месяцев назад

    Is it possible to use a PIV authentication in AWS Cognito without an IDP?

    • @awssupport
      @awssupport 7 месяцев назад

      Hi there, here is a blog that might help answer your question: go.aws/4eaoWiH. Additionally, another option to get this question answered is re:Post: go.aws/aws-repost. Our AWS industry experts hang out in that forum, and you can post and read posts from them. ^DC