Getting an error logging in with IdP in authorization code grant flow

0

I'm trying to add an identity provider (Okta) to my user pool. I've been able to get the implicit grant flow working for one app client in my pool.

Now I've set up a new app client for the authorization code grant flow in order to support OAuth access to my API.

What I'm seeing is that after redirecting to the cognito oauth2/authorize endpoint, it correctly redirects to the hosted login that allows me to select the identity provider. When I log in through the identity provider, it redirects me back to the hosted login page and displays an error message saying "Something went wrong. Please try again."

I have both the identity provider and the user pool set up for this client. If I log in using username/password to the user pool, it works as expected.

So now I have some questions:

  1. Is this a supported configuration - is it possible to use an IdP with the authorization code grant flow?
  2. How can I find out more about what's going wrong - the error message is not helpful for debugging
jpulse
質問済み 4年前792ビュー
2回答
0

I got it working. I had a custom domain name configured for my pool. If I don't use that custom domain URL to start the OAuth process, I get the error. If I use my custom domain, it works.

jpulse
回答済み 4年前
0

Glad you got it working! The OAuth flows should always be started from the Cognito domain configured .

AWS
回答済み 4年前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ