What is the difference btw AWS active directory services VS cognito identity pool VS SAML VS IDP's?

0

I want to understand the used cases and differences between AWS directory services, Cognito identity pool, SAML, OIDC and Identity providers (IDP's) in detail so that i could choose the appropriate service for my need.

1개 답변
0

Hello.

AWS Directory Services is used when using Active Directory on AWS or when linking with an existing Active Directory on-premises.
For example, you often use AWS Directory Services when joining an RDS MSSQL server to Active Directory or using an FSx Windows file server.
https://docs.aws.amazon.com/directoryservice/latest/admin-guide/what_is.html

Cognito identity pools are used to grant temporary AWS credentials to authenticated users.
For example, suppose an application user wants to access S3.
By setting up an ID pool at that time, it is possible to give access rights to S3 from application users.
https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-identity.html

It is not a service as it is a standard for authentication information used for SSO (single sign-on) and ID linkage.
https://www.onelogin.com/learn/saml

OIDC is an authentication protocol that extends OAuth 2.0.
https://www.microsoft.com/en-us/security/business/security-101/what-is-openid-connect-oidc

The following document contains a comparison between SAML and OIDC, which I think will be helpful.
https://auth0.com/intro-to-iam/saml-vs-openid-connect-oidc

IdP is a service that stores, manages, and provides user authentication information.
https://www.cloudflare.com/learning/access-management/what-is-an-identity-provider/

profile picture
전문가
답변함 3달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인