ADFS Claims Mapping to Cognito User Pools

Question

Hi All,

I'm looking for a way to send custom attribute such as "Company" from AD using ADFS to Cognito User Pools.
The customer wants to include the "Company" field in the JWT Token ID.

For example, for E-Mail claims configuration I would use the following settings on ADFS side:
https://d2908q01vomqb2.cloudfront.net/0a57cb53ba59c46fc4b692527a38a87c78d84028/2018/08/10/ADFS6.png
With the following schema on Cognito side:
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

There is any solution for that?
Which schema / custom claims configuration should I use?

Accepted Answer

On your Cognito User Pool you have a list of Attributes.  If the attribute you need is not on the standard list you can add a custom attribute.  You can then go to the Federation section of the console screen and select Attribute Mapping.  This will allow you to map the source attribute from ADFS to the attribute you selected or created in the Cognito User Pool.

ADFS Claims Mapping to Cognito User Pools

相关内容