Skip to main content
Filter by
Sorted by
Tagged with
1 vote
0 answers
36 views

How to Set Up Amazon Cognito as the Sole SAML Identity Provider (IdP) Without Third-Party Integration?

I'm currently working on setting up Amazon Cognito as the sole SAML Identity Provider (IdP) for my web and mobile applications. Most of the documentation and guides I've found, such as this AWS blog, ...
knightsky's user avatar
0 votes
1 answer
18 views

AWS Cognito: Missing Scopes in Access Token with Custom UI and Device Remember Functionality for MFA

I'm using AWS Cognito and working with the Hosted UI. The problem I have is that I'm unable to remember a device for a given user, so I can't prevent the requirement of entering the authenticator code ...
smile's user avatar
  • 103
0 votes
0 answers
16 views

AWS IoT permission policy for user authenticated with Cognito UserPool and Cognito IdentityPool

As stated in docs (https://docs.aws.amazon.com/iot/latest/developerguide/connect-and-pub.html) For devices not registered as things in the AWS IoT Core registry, the following policy grants ...
Fabio's user avatar
  • 980
-1 votes
0 answers
31 views

How to configure AWS Cognito Federated Identity Provider's `IdP-initiated SAML sign-in` field? [closed]

I am working on terraforming my AWS Cognito User Pools, but my google-fu is failing me. How do I configure my federated identity provider so that it's IdP-initiated SAML sign-in is assigned to Require ...
Ryan Pierce Williams's user avatar
0 votes
1 answer
26 views

How to disable Self-Registration for AWS Cognito User Pool from Terraform?

I'm trying to terraform my AWS Cognito User Pool configuration. I'm using federated authentication and would like to disable user self-registration / sign-up. How can I do this via terraform?
Ryan Pierce Williams's user avatar
0 votes
0 answers
17 views

AWS Cognito: How to obtain an access token after user sign-up and confirmation without requiring a separate sign-in?

I'm using AWS Cognito for user authentication. After a user signs up and confirms their account using the verification code sent via email, they are required to sign in again to receive an access ...
Norbert's user avatar
  • 4,291
-1 votes
1 answer
35 views

Multi-tenant application AWS

I've gone through several posts in here, but couldn't find any that would relate to my setup, maybe the setup is bad, so i'm open to suggestions. I'm currently trying to execute such workflow: User ...
Pkns's user avatar
  • 1
0 votes
0 answers
22 views

How do I connect to AWS IoT with Local Certificate in an iOS app?

What I am trying to do is use the AWS SDK ( which can be found here: https://github.com/aws-amplify/aws-sdk-ios/blob/main/README.md#aws-sdk-for-ios ) to connect to AWS IoT so that I can subcribe to ...
user2807654's user avatar
0 votes
0 answers
29 views

How to Integrate AWS Cognito User Pool with AWS Managed Microsoft AD?

I'm currently working on a project where I need to integrate an AWS Cognito User Pool with an AWS Managed Microsoft Active Directory (AD). The goal is to allow users authenticated via the Managed ...
Christopher Thompson's user avatar
0 votes
0 answers
25 views

AWS Cognito app client creation not setting up identity providers properly

I'm trying to create an app client for my Cognito user pool, using the following snippet of code: CreateUserPoolClientRequest request = CreateUserPoolClientRequest.builder() ....
Alessio D's user avatar
-2 votes
2 answers
30 views

Why do I have to add "All Traffic" & "0.0.0.0/0" when configuring an AWS ACL for Nat Access to AWS Cognito?

When I have my ACL's Configured like this, My lambda is not able to send Admin SDK calls to Cognito. But when I add "All Traffic" & "0.0.0.0/0" instead of 80 and 443 the. calls ...
RobloxHero's user avatar
1 vote
0 answers
20 views

AWS Amplify and Amazon Cognito: PostAuthentication Lambda Trigger on Re-login

I am using AWS Amplify and Amazon Cognito for user authentication in my Angular application. On the first login attempt, everything works fine. However, after logging out and attempting to log in ...
Pusoy's user avatar
  • 43
0 votes
0 answers
21 views

AWS-Amplify: The tokens could not be refreshed: The token has been revoked

I have a code where, when the user tries to query a route, it checks the token in this way: final AuthSession result = await Amplify.Auth.fetchAuthSession( options: const FetchAuthSessionOptions( ...
LeticiaB's user avatar
0 votes
0 answers
20 views

Can AWS Cognito allow SignIn with both email and phone number if only email is required for SignUp?

I am configuring an AWS Cognito user pool where I want users to be able to SignIn using either their email or phone number. However, I plan to set only the email as a required attribute for SignUp (...
Mark's user avatar
  • 1
0 votes
0 answers
21 views

How to specify User's IdentityID when configuring IdentityPool's Authenticated IAM Role

Consider the following: An AWS Cognito Identity Pool (Identity Pool ID: us-east-1:abc) A User that exists in the above pool (Identity ID: us-east-1:xyz) An AWS IoT Core Policy (or any AWS resource) ...
Varun Gawande's user avatar
1 vote
0 answers
34 views

How to modify a custom attribute of Cognito Userpool?

I have made application which requires login and signup. The data fields of users are like (name, emailid, password and role_type(default is visitor). So there are two roles- Admin and visitor. I have ...
1DS20IS407__SHAIKH_ALAM's user avatar
1 vote
1 answer
48 views

events logs show the LOGOUT event as a Success, but the session between Cognito and Keycloak keeps active

I am trying to configure Cognito as an External IDP for my Keycloak, I´ve managed to configure it`s full login methods, etc.. but when it comes to logout it just wont work, the events logs show the ...
Vitor Conti's user avatar
0 votes
0 answers
36 views

export 'Auth' (imported as 'Auth') was not found in 'aws-amplify'

I shouldn't import Auth from 'aws-amplify' I'm trying to do Change password in react. But it is giving error when I make these calls const user = await Auth.currentAuthenticatedUser(); await Auth....
Ricardo R's user avatar
0 votes
2 answers
35 views

Trying to verify confirmation code during user sign up using AWS Cognito in Flutter

I am trying to verify the confirmation code for users signing up for the application using AWS Cognito in Flutter. I am receiving a Bad request, Status 400 error NotAuthorizedException (full error ...
Michael's user avatar
0 votes
1 answer
29 views

How to secure AWS API Gateway with Cognito

I created a Lambda API Gateway and added a Cognito Authorizer. When I test the Authorizer in the console, it works. However when I call the API from my ASP .NET code, I do not need to add any token to ...
Primico's user avatar
  • 2,373
0 votes
0 answers
21 views

Angular + OidcSecurityService package + Forcing Signup

calling this.oidcSecurityService.authorize(); invokes the LOGIN page in cognito. But my cognito setup also allows for sign-up, showing the "sign up" option below. Once clicked, it changes ...
JasonGenX's user avatar
  • 5,334
0 votes
0 answers
20 views

Handling new password challenge from Cognito within NextAuth

I'm developing a Next.js application using NextAuth for managing session/authentication and AWS Cognito as the user pool. I'm having trouble when is the first time the user tries to log in as AWS ...
Anthony Acosta's user avatar
1 vote
1 answer
25 views

How to Use Cognito Identity Pool with Unauthenticated Users in Amplify v6 for API Gateway Access

I've been struggling to figure out how to allow unauthenticated users to invoke my SAM backend after migrating from Amplify v5 to v6. In Amplify v5, this configuration worked for unauthenticated users ...
NorahKSakal's user avatar
1 vote
0 answers
30 views

AWS Cognito ListUsersAsync call fails to find user by phone number

I've come across the strangest issue with AWS Cognito. If my UI creates a non SSO user with a valid phone number, my API (which uses the .NET AWS SDK to call the AmazonCognitoIdentityProviderClient....
BrentonL's user avatar
0 votes
0 answers
18 views

Is it possible to customize invitation emails within a single user pool in AWS Cognito?

I'm building multiple separate apps but would like users to be able to log into one app and be automatically logged into all of them. My plan was to use a single Cognito user pool to accomplish this. ...
755's user avatar
  • 3,041
0 votes
0 answers
45 views

Access Private S3 Directory Files Through CloudFront Using AWS Signature

I'm trying to access files stored in a private directory within my S3 bucket through CloudFront. Here's the setup: S3 Bucket Configuration: Some files are public and can be accessed by anyone. Other ...
Ognjen Milicevic's user avatar
0 votes
0 answers
23 views

Can Cognito custom authentication be used to authenticate by password?

The reason why I am doing this, to do MFA with a security key that normal cognito does not support for 2-step authentication. I was able to implement this to the point where I can successfully log in ...
gattoman's user avatar
1 vote
0 answers
22 views

Is there any way that I can access to the header origin in Pre Authentication with Lambda?

I am trying to secure the User Pool ID by limit the domain can access to my User Pool. If someone has my Pool ID and try to make a fake site with it, they can not make sign in/sign up to my User Pool ...
Geralt's user avatar
  • 11
0 votes
0 answers
13 views

Handling Password Reset in AWS Cognito: Separating Code Verification and Password Change

I’m implementing a password reset flow using AWS Cognito. Desired Flow: 1. User requests a password reset; Cognito sends a verification code. 2. User verifies the code, then transitions to a new ...
Ron Tsarum's user avatar
0 votes
1 answer
41 views

Amazon Cognito Logout problem Required String parameter 'redirect_uri' is not present

I can run my logout URL directly. domain/logout?client_id={clientId}&logout_uri=https://localhost:7098/ However, when I give this link as a href to the button on the website and the button is ...
Kerim Berkay's user avatar
0 votes
1 answer
66 views

AWS Amplify muliple login feature same as provided by gmail and facebook

I have a use case where users can switch accounts and be instantly logged in with another account without needing to enter their password if they have logged in to the application before. I've ...
aashir khan's user avatar
1 vote
1 answer
32 views

Can I give users the option between sending Cognito Verification Code through email or SMS?

I have a React App with AWS Amplify using Cognito for Authentication, currently I send a Verification code through the user's email but I want to give them the option to choose if they want to receive ...
Paúl's user avatar
  • 11
0 votes
0 answers
24 views

How to properly validate user session with `aws-amplify/auth`?

Description I've web project hosted on AWS Amplify. In this project, there are a login and sign up screen which are using the aws-amplify/auth to handle my user authentication. Since I've created the ...
Alan Graton's user avatar
1 vote
0 answers
22 views

How to make call to AWS Lambda function with Cognito User logged into ASP .NET Razor website

I believe the code below is how I would make a call to my AWS Lambda function. Users log into the site with Cognito. Would I somehow get credentials from the User.Identity or would I use an access key/...
Primico's user avatar
  • 2,373
0 votes
0 answers
26 views

How to Get Encoded JWT in Angular Using Amplify?

I'm using Angular with AWS Cognito for authentication and am trying to implement an HTTP interceptor to attach an access token to outgoing requests. My current implementation retrieves the access ...
Tom's user avatar
  • 1
0 votes
0 answers
23 views

Cross region authentication

I have an web application which is deployed in two aws regions. Each application is linked to its own cognito user pool. Application A <-> User Pool A Application B <-> User Pool B This ...
NovM's user avatar
  • 15
0 votes
0 answers
21 views

Amplify React Sign In Redirect not working as intended

I'm trying to implement a feature where whenever a user logs in, depending on the Cognito attribute of user being either 'user' or 'admin.' they get redirected towards a different interface. This is ...
Jeffrey's user avatar
0 votes
1 answer
28 views

AWS Cognito Pre Auth Trigger Error" Unrecognizable lambda output"

I'm trying to suppress the aws.cognito.signin.user.admin scope from being in the access token in certain cases. I am getting the following error Error authenticating with Cognito: ...
Luke Becker's user avatar
0 votes
0 answers
16 views

How do I get a Cognito refresh token using Amplify?

My code, using Amplify v6: import { Amplify } from "aws-amplify"; import { signIn, fetchAuthSession } from "aws-amplify/auth"; Amplify.configure({ Auth: { Cognito: { ...
fblundun's user avatar
  • 995
0 votes
0 answers
34 views

I cant make AWS Api Gateway redirect me to Cognito Hosted UI

all the tutorial video/blog i looked into do exactly the same thing, after they set up the api gateway and cognito userpool, they try to test there endpoint in api gateway and they of course get ...
Stykle Sty's user avatar
0 votes
0 answers
12 views

Is it possible to return a user ID from the database in a response when signing in or verifying a user in AWS Cognito?

I'm currently working on an AWS Cognito setup where I need to store user information in a MySQL database during the pre-signup trigger. I want to use an auto-incremented primary key (PK) in the ...
Karim Fayed's user avatar
0 votes
2 answers
26 views

Secure users data from admin access in AWS

I want to build an application to save data input from my user in DynamoDB and/or S3. Usually I use API Gateway and Lambda for this. With users authenticated by Cognito. So far so easy. Now I want ...
HOK's user avatar
  • 257
0 votes
0 answers
20 views

Authentication from IFRAME without 3rd party cookies

I have an application that authenticates our customers via their own IDP that is federated to our application via AWS cognito. Our customer wants a following user-experience: When opening their ...
Petr Jeske's user avatar
0 votes
0 answers
16 views

Cannot decode cognito state string

I am calling cognito with a &state=xxxxxx parameter. when I get my redirection back, I see a state param in addition to the code. It seems to be encoded somehow, but not base64 nor gzip cannot ...
JasonGenX's user avatar
  • 5,334
0 votes
1 answer
28 views

Ugly workaround for session expiration in a Next.js app using Cognito. Is there a better solution?

I am writing a Next.js app for a client. The app is using NextAuth to authenticate users via AWS Cognito (OAuth, OIDC, JWT, etc.). Currently, I am using the Cognito hosted UI for authentication. All ...
Ezra Friedlander's user avatar
0 votes
0 answers
14 views

Cannot send verification email link for AWS cognito

I am using AWS cognito in my ionic app to create a user but the default setting is to send a verification code, and it's working, but when i try to change the setting in the cognito console to send a ...
Godfather29's user avatar
0 votes
0 answers
16 views

How to create an API authorization with the latest IOS SST and AWS

I want to create an API with the new SST v3 aka ION SST. Docs don't say much about auth-related things and I feel confused. I have a separate Next.js app and now I want to create a backend ...
Karol's user avatar
  • 619
0 votes
1 answer
19 views

Access token fetched from AWS Cognito oauth api endpoint is invalid when utilized by boto3

Having been confused by AWS Congito for weeks... Are there any difference between access tokens retrieved by /oauth2/token and boto3? If so, how can my backend use an access token passed from my ...
Lightyears's user avatar
  • 1,378
0 votes
1 answer
27 views

Issue with Google Authentication using AWS Cognito in Next.js App

I'm working on a Next.js application and trying to authenticate users with Google using AWS Cognito. The button is supposed to handle the authentication like this: 'use client' import React, { ...
Rai's user avatar
  • 55
2 votes
1 answer
205 views

Integrating AWS Cognito and Azure AD: Allowing access for any Microsoft User even if they are not in the Azure AD?

Okay so my goal was to integrate google and microsoft with aws cognito to give allow users to signup/signin using their google and microsoft accounts. The google one works perfectly but since there ...
Ali Javed's user avatar

1
2 3 4 5
149