sub attribute on Cognito Pre Sign Up lambda

0

I'd like to have access to the sub attribute on the pre-sign-up trigger function when customer is signin up with external IdP. Will this be possible in the near future?

Use case is that the authorization layer of the application is handled in the backend, so I need to insert the user to database in the sign up process.

Related thread: https://forums.aws.amazon.com/thread.jspa?threadID=309346

teemu
asked 2 years ago1155 views
1 Answer
1
Accepted Answer

Hi,

SUB is not available in pre-signup trigger because the user hasn't been created at this stage (it is "pre" sign-up, meant for validation to decide whether to allow the sign-up to continue or reject the request). If you want to propagate the SUB to backend you should use PostConfirmation trigger for this, this will be triggered after the user has been created and confirmed.

AWS
EXPERT
answered 2 years ago
  • Thanks for the quick reply.

    Does post confirmation trigger execute before the authentication flow is complete? We need the user to be present in the database before user is redirected back to the frontend after the sign up?

  • I did some experimentation and post confirmation is indeed part of the external provider sign up flow. That solves the issue, thanks! The documentation could be more clear on this though.

    Noted also that when using adminCreateUser, the post confirmation doesn't trigger. I can imagine there would be many use cases for using a trigger which runs every time after the user has been created to the pool, no matter which way the creation happened.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions