Cognito and External IdPs

Question

Working on a project with Cognito that we would like to use different login types, one of which is MS federated IDs...Ideally we would like sign in with multiple SAML partners...I know there is an identifiers field to help out filter what domain to which IDP but as this app will be facing multiple parties, that SSO IDP list can get real cramp real quick...I have seen some screen shots of "Company login", but cant find much beyond that...has anyone faced similar issues?

Answer

Didier, thanks for the response however I think I may have not conveyed the endgame I was looking for...in the idp area for cognito, there is google, facebook, apple, Amazon...I was hoping to see if there was a way to do a generic microsoft azure one or just list "company login" and leverage the identifiers to sort it out

Answer

Hi,
Did you review AWS IAM Identity Center (successor of AWS SSO): https://aws.amazon.com/iam/identity-center/features/

You easily connect to your existing identity source, including Microsoft Active Directory, Okta, Ping Identity, JumpCloud, and Azure Active Directory (Azure AD). The identities that they manage will be federated into AWS IAM.

The full list is here : https://docs.aws.amazon.com/singlesignon/latest/userguide/supported-idps.html

Additionally, it is integrated with AWS Organizations if you work in a multi-account environment.

Best,

Didier

Cognito and External IdPs

Relevant content