Determining the identity provider for SAML IdPs using a query parameter

0

I have a user pool with multiple SAML IdPs set up. I don't want my SSO customers to have to choose which IdP to use, as this would expose our customer list. I understand I can route the users to the appropriate IdP using an Identifier (email domain), but I would prefer to route this automatically based on sending a query parameter to the login page. The AWS documentation suggests this should be possible

https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-saml-idp-authentication.html
"Alternatively, if your app gathered information before directing the user to your user pool, it can provide that information to Amazon Cognito through a query parameter."

but the documentation doesn't specify what this query parameter is called. I have tried a number of options, like 'provider' or 'IdPprovider', but none seem to work. Does this feature work? If so, what is the name of the query parameter I should use?

gefragt vor 3 Jahren484 Aufrufe
2 Antworten
0

You can pass it on the (Authorize)https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html endpoint using either identity_provider or idp_identifier parameters.

beantwortet vor 3 Jahren
0

Thanks @cfbarbero1. This was the solution I was looking for.

beantwortet vor 3 Jahren

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen