- Newest
- Most votes
- Most comments
This issue appears to be related to how the Cognito Managed Login UI handles sign-up attempts with federated identity providers (IdPs).
The "Something went wrong" error you're encountering when users try to sign up with their corporate email (OIDC/SAML) from the Sign Up page is likely due to the missing parameters in the API call. As you correctly identified, essential parameters like client_id and redirect_uri are missing when the request is initiated from the Sign Up page, while they are present when initiated from the Sign In page.
This behavior is consistent with how Cognito's Managed Login UI is designed to work. The Managed Login UI is primarily set up to handle federated authentication through the Sign In page, not the Sign Up page. When users with corporate emails attempt to sign up, the system should ideally recognize these domains and direct them to sign in with their federated provider instead of creating a new account.
For federated users (OIDC/SAML), the proper flow is to sign in directly through the Sign In page where they can select their identity provider. The Sign Up page is intended for users who will create local accounts within the Cognito user pool directory, not for federated authentication.
To address this issue:
-
Make sure your app client configuration has the correct identity providers selected in the Managed Login pages configuration.
-
Consider customizing your application's user experience to guide users with corporate emails directly to the Sign In page rather than the Sign Up page.
-
If you need more control over error messages or the authentication flow, you might need to implement a custom authentication UI instead of using the Managed Login UI, as the Managed Login UI has limited customization options for error handling.
This appears to be a limitation of the current implementation of Cognito's Managed Login UI rather than a misconfiguration on your part.
Sources
Cognito Managed Login - No button on login page for external IDP | AWS re:Post
Displaying error message in Cognito managed login sign-in page | AWS re:Post
OIDC user pool IdP authentication flow - Amazon Cognito
Decoding the 'Missing required parameter client_id' Error in AWS Cognito | AWS re:Post
Relevant content
- asked a year ago
