OIDC SSO Amazon Cognito
From iDempiere en
Developer: Hengsin
Feature Ticket: IDEMPIERE-5346
OIDC Setup for Amazon Cognito
Create User Pool
https://console.aws.amazon.com/cognito/home > User pools > Create user pool
Step 1. Select Cognito user pool provider type.
Step 2. Configure password and authentication policy.
Step 3. Configure sign-up experience.
Step 4. Configure email and SMS delivery.
Step 5. Setup integration with app.
Step 5. Setup cognito domain and select Confidential client.
Step 5. Enter app client name and select generate client secret.
Step 5. Enter callback URLs.
App Client
Copy Client ID and Client Secret
Edit Hosted UI. Add Profile to selected OpenID Connect scopes.
Create User
iDempiere SSO Configuration
Application Discovery URI format - https://cognito-idp.[region].amazonaws.com/[userPoolId]/.well-known/openid-configuration
Caveat
- Need to close browser to login with different Amazon Cognito user pool account