External IDP Tokens in Cognito User Pools


Does Cognito User Pools store tokens granted by external IDPs (such as external access_token and refresh_token)? If so, how can they be accessed?

feita há 2 anos1134 visualizações
2 Respostas


You can create a custom attribute [1] in your user pool, and then you can map [2] that custom attribute with the attribute name sent from identity provider side token endpoint.

For example, your identity provider sends the access token with a attribute named access_token. Then, you can create a custom attribute external_access_token. And map custom:external_access_token with access_token in attribute mapping section of your user pool [2].

I have tested this solution for Google and it worked. If you want to have other tokens (id token or refresh token) then you can create another custom attribute and map it in similar way.

Note: Please note that there is a size limit on length of a custom attribute. If the token sent from your IdP is longer than 2048 characters then this solution will not work.

I hope this helps. In case you have any further queries/concerns then please let me know.


[1] https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html

[2] https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html#cognito-user-pools-specifying-attribute-mapping-console

respondido há 2 anos
profile picture
avaliado há um mês

You can get the user's tokens using the /oauth2/token endpoint.

respondido há 2 anos

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas