Getting an error logging in with IdP in authorization code grant flow

0

I'm trying to add an identity provider (Okta) to my user pool. I've been able to get the implicit grant flow working for one app client in my pool.

Now I've set up a new app client for the authorization code grant flow in order to support OAuth access to my API.

What I'm seeing is that after redirecting to the cognito oauth2/authorize endpoint, it correctly redirects to the hosted login that allows me to select the identity provider. When I log in through the identity provider, it redirects me back to the hosted login page and displays an error message saying "Something went wrong. Please try again."

I have both the identity provider and the user pool set up for this client. If I log in using username/password to the user pool, it works as expected.

So now I have some questions:

  1. Is this a supported configuration - is it possible to use an IdP with the authorization code grant flow?
  2. How can I find out more about what's going wrong - the error message is not helpful for debugging
jpulse
asked 3 years ago62 views
2 Answers
0

I got it working. I had a custom domain name configured for my pool. If I don't use that custom domain URL to start the OAuth process, I get the error. If I use my custom domain, it works.

jpulse
answered 3 years ago
0

Glad you got it working! The OAuth flows should always be started from the Cognito domain configured .

answered 3 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions