How to add Azure AD as AWS Cognito Federated IdP

G'day Everyone.

I have a web application that works with AWS S3, RDS, Lambda, and the Gateway API using the AWS Cognito user pool as a login service. While this is working. But now I would like to integrate it with Azure ID.

Someone has some good documentation about this. I can only find documentation for other purposes or for integrating Azure AD into the AWS console. The reason may be that this feature has just moved from beta to production a few weeks ago.

+6
source share
2 answers

The steps are quite long, but I created a tutorial on how to configure this. There is a current error in the AzureAD web console that does not allow you to change the application identifier to URN, but you can work around it by changing the setting using PowerShell AzureAD.

See the following blog post here:

https://www.idea11.com.au/how-to-set-up-aws-cognito-federation-office365/

+6
source

I ran into some problems when logging in through personal live / hotmail accounts using SAML. It turned out that while there is no corresponding support, try OIDC.

Follow: https://www.terminalbytes.com/azure-ad-integration-as-an-idp-with-aws-cognito/

+2
source

Source: https://habr.com/ru/post/1271047/


All Articles