Alternative to creating custom attributes for accessing sources with subscription in cognito

Question

In Amazon cognito, user has a limit to add 50 custom attributes only, For example we have two portals one is customer portal and other is New portal, we have created a user through SSO in user portal and he can access the New portal with same credentials but if he require to access/use extra resources in New portal he should be having subscription to them. Is there any way to achieve this. Any leads on this will be super helpful.

MassimilianoAWS · Answer

Hi, you can add custom claims to the access token which can be based on external information related to the user (eg stored in a Amazon DynamoDB table). This blog post walks you through the details of such solution and provides sample code.

https://aws.amazon.com/blogs/security/use-amazon-cognito-to-add-claims-to-an-identity-token-for-fine-grained-authorization/

Alternative to creating custom attributes for accessing sources with subscription in cognito

Contenido relevante