OIDC SSO Amazon Cognito

Developer: Hengsin

Feature Ticket: IDEMPIERE-5346

OIDC Setup for Amazon Cognito

Create User Pool

https://console.aws.amazon.com/cognito/home > User pools > Create user pool

Step 1. Select Cognito user pool provider type.

Step 2. Configure password and authentication policy.

Step 3. Configure sign-up experience.

Step 4. Configure email and SMS delivery.

Step 5. Setup integration with app.

Step 5. Setup cognito domain and select Confidential client.

Step 5. Enter app client name and select generate client secret.

Step 5. Enter callback URLs.

App Client

Copy Client ID and Client Secret

Edit Hosted UI. Add Profile to selected OpenID Connect scopes.

Create User

iDempiere SSO Configuration

Application Discovery URI format - https://cognito-idp.[region].amazonaws.com/[userPoolId]/.well-known/openid-configuration

Caveat

• Need to close browser to login with different Amazon Cognito user pool account

See also

• Google Cloud OIDC Configuration
• Microsoft Azure OIDC Configuration
• Keycloak OIDC Configuration