Unable to configure Application Load Balancer using Cognito client App which has no secret

Question

Hello,

I try to setup environment in which Cognito user pool Application is linked to the Application Load Balancer Listener. When I try to use App client created with no secret I get an error "The user pool client must have a client secret" .  Client App has been created with no secret in order to use TOTP. 
My question is whether there is a limitation to use App client without secret linked to the ALB ?

br
Jacko

Accepted Answer

Hello there,

Per the [documentation](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/listener-authenticate-users.html)  , when configuring Application Load Balancer with Cognito user pool and app client , you need to generate the client secret as it is a required attribute for actions attribute while creating the ALB rule

Unable to configure Application Load Balancer using Cognito client App which has no secret

Relevant content