Determining the identity provider for SAML IdPs using a query parameter

0

I have a user pool with multiple SAML IdPs set up. I don't want my SSO customers to have to choose which IdP to use, as this would expose our customer list. I understand I can route the users to the appropriate IdP using an Identifier (email domain), but I would prefer to route this automatically based on sending a query parameter to the login page. The AWS documentation suggests this should be possible

https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-saml-idp-authentication.html
"Alternatively, if your app gathered information before directing the user to your user pool, it can provide that information to Amazon Cognito through a query parameter."

but the documentation doesn't specify what this query parameter is called. I have tried a number of options, like 'provider' or 'IdPprovider', but none seem to work. Does this feature work? If so, what is the name of the query parameter I should use?

已提问 3 年前459 查看次数
2 回答
0

You can pass it on the (Authorize)https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html endpoint using either identity_provider or idp_identifier parameters.

已回答 3 年前
0

Thanks @cfbarbero1. This was the solution I was looking for.

已回答 3 年前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则