Alternative to creating custom attributes for accessing sources with subscription in cognito

Question

In Amazon cognito, user has a limit to add 50 custom attributes only, For example we have two portals one is customer portal and other is New portal, we have created a user through SSO in user portal and he can access the New portal with same credentials but if he require to access/use extra resources in New portal he should be having subscription to them. Is there any way to achieve this. Any leads on this will be super helpful.

Answer

Hi, you can add custom claims to the access token which can be based on external information related to the user (eg stored in a Amazon DynamoDB table). This blog post walks you through the details of such solution and provides sample code.

https://aws.amazon.com/blogs/security/use-amazon-cognito-to-add-claims-to-an-identity-token-for-fine-grained-authorization/

Alternative to creating custom attributes for accessing sources with subscription in cognito

관련 콘텐츠