Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

Amazon Cognito | Verify format of SAMLRequest sent to IDP

0

We are integrating with a partner who uses Amazon Cognito and we are the IDP. They have loaded our IDP metadata file and when I send a request to their authorization endpoint to initiate the SAML session, we receive a request containing SAMLRequest and RelayState values.

Amazon Cognito documentation does not state how the SAMLRequest and RelayState are generated/formatted.

Are these values encrypted and then Base64 encoded? Are there any samples or examples available of what an unencrypted SAMLRequest contains?

Topics
Security, Identity, & Compliance
Tags
Amazon Cognito
Language
English

asked 3 years ago767 views

1 Answer
0

Hi,

Cognito SAML Request are following SAML 2.0 standard are are not encrypted only signed.

You can find more information in https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-saml-idp.html

Cognito SAML Metadata can be constructed based on https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-integrating-3rd-party-saml-providers.html

Jeff

AWS

answered 3 years ago

  • rePost-User-3169185
    3 years ago

    Thank you, Jeff. Where can we configure signing of the SAMLRequest? We were able to decode and decompress the SAMLRequest, however there is no signature element included with the AuthNRequest XML received from Cognito.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content