Determining the identity provider for SAML IdPs using a query parameter

0

I have a user pool with multiple SAML IdPs set up. I don't want my SSO customers to have to choose which IdP to use, as this would expose our customer list. I understand I can route the users to the appropriate IdP using an Identifier (email domain), but I would prefer to route this automatically based on sending a query parameter to the login page. The AWS documentation suggests this should be possible

https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-saml-idp-authentication.html
"Alternatively, if your app gathered information before directing the user to your user pool, it can provide that information to Amazon Cognito through a query parameter."

but the documentation doesn't specify what this query parameter is called. I have tried a number of options, like 'provider' or 'IdPprovider', but none seem to work. Does this feature work? If so, what is the name of the query parameter I should use?

demandé il y a 3 ans484 vues
2 réponses
0

You can pass it on the (Authorize)https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html endpoint using either identity_provider or idp_identifier parameters.

répondu il y a 3 ans
0

Thanks @cfbarbero1. This was the solution I was looking for.

répondu il y a 3 ans

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions