View SAML assertions passed to Cognito

Question

My company uses Cognito to manage users for our website.

I would like to debug problems users have signing in with SAML.

Is there a way to see logs on SAML assertions that are passed from our user's IdP to Cognito?

I'm hoping there's a place where I can see the content of every SAML assertion that Cognito receives.  So far I have not found anything like this.

Answer

I would recommend using the SAML tracer chrome extension(It's like fiddler for SAML). Please see the following URL. If you are unable to use the extension or it does not meet your needs then please use AWS CloudTrail logs.

https://chrome.google.com/webstore/detail/saml-tracer/mpdajninpobndbfcldcmbpnnbhibjmch?hl=en

View SAML assertions passed to Cognito

相關內容