Identity not found in GetCredentialsForIdentityRequest

Question

Hi all,  
I created a SAML Identity Pool in Cognito and tried to get a JWT from a Java fat client.

```
AmazonCognitoIdentity  client=AmazonCognitoIdentityClientBuilder.standard()
                                  .withRegion(Regions.EU_CENTRAL_1)
                                  .build();
    
    Map logins = new HashMap();
    logins.put("arn:aws:cognito-identity:eu-central-1:123456789:identitypool/eu-central-1:fxxxxx-bxxx-4xxx-bxxx-1xxxxxxx3", "I wish I was a base64 SAML Assertion");
    
    GetCredentialsForIdentityRequest request=new GetCredentialsForIdentityRequest()
                                                 .withIdentityId("eu-central-1:fxxxx-bxxx-4xxx-xxx-xxxxb6f3")
                                                 .withLogins(logins);
   
    GetCredentialsForIdentityResult result= client.getCredentialsForIdentity(request);
```

Gave me

```
 com.amazonaws.services.cognitoidentity.model.ResourceNotFoundException: Identity 'eu-central-1:fxxxx-bxxx-4xxx-xxx-xxxxb6f3' not found. (Service: AmazonCognitoIdentity; Status Code: 400; Error Code: ResourceNotFoundException;
```

I already red about setting the region which I did but without any effect.  
We double checked the identity pool id  
Any Ideas what could went wrong with my call?  
  
Thanks in advance

Answer

Hi,  
  
the secret has been unveiled. To connect as an anonymous user to a cognito identity pool you need these few lines of code:

```
AmazonCognitoIdentity  client=AmazonCognitoIdentityClientBuilder
                                  .standard()
                                  .withRegion(Regions.EU_CENTRAL_1)
                                  .withCredentials(new AWSStaticCredentialsProvider(new AnonymousAWSCredentials()))
                                  .build();

Map logins = new HashMap();
    logins.put("arn:aws:iam::1234567890:saml-provider/my-saml-provider", "A base64 SAML response");
    
    GetIdRequest request = new GetIdRequest()
                                                 .withIdentityPoolId("eu-central-1:7xxxxx-cxxx-xxxx-xxx-xxxxx")
                                                 .withLogins(logins);
   
   GetIdResult result= client.getId(request);
```

In the logins map you have to put the arn of the SAML provider you created in IAM using the SAML Metadata.  
  
Edited by: drdimitri on Dec 9, 2019 1:50 AM  
  
Edited by: drdimitri on Dec 10, 2019 5:01 AM

Identity not found in GetCredentialsForIdentityRequest

Relevant questions

Can you set a Cognito Identity Pool to include all users/EC2s of the acct?

How do I Read PrincipalTags from Cognito Identity?

Verify OpenId Connect token generated by Cognito Identity pool

How to delete a record key in Cognito identity pool dataset?

Modify an Identity Pool Cognito JWT

Should I use Cognito Identity Pool OIDC JWT Connect Tokens in the AWS API Gateway?

Cognito SAML with multiple external IdPs

Identity not found in GetCredentialsForIdentityRequest

HTTP API with JWT Authoriser

I can't get my Cognito license