Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Support for cognito federated indentities #460

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

Rob-Powell
Copy link
Contributor

Issue #, if available:

#387

Description of changes:

Users of the solution usually want to quickly demo and highlight value, connecting to an organisations existing identity provider is a quick way of enabling secure access to the solution to a defined user base.

Adds support for users to configure and leverage the solutions ability to Federate user logon via supported Cognito federation.

I have written docs for this solution see additions under docs/

Currently this solution only supports:

  • Cognito custom OIDC providers.
  • Cognito custom SAML providers.
  • Supports setting the configuration later within the setup process but a helpful guided process is also provided.

2 Custom Resource lambda functions had to be used"

  • 1 to update the cognito client with the created domain (circular dependency)
  • 2 to securely pass the OIDC client secret to the cognito identity provider avoiding having the secret stored in cloudformation

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@Rob-Powell Rob-Powell force-pushed the feat-cognito-federation branch 2 times, most recently from 27ae5d7 to d075ddb Compare April 25, 2024 07:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: No status
Development

Successfully merging this pull request may close these issues.

None yet

1 participant