Parent | Child | Previous | Next
 

Amazon Cognito — UX Login Component

Description

You can use AWS Cognito as an Identity Provider (IdP) with the UX Login component. A single User Pool in Cognito can authenticate users for multiple Alpha Anywhere applications, enabling single sign-on across apps that share the same User Pool.

Overview

AWS Cognito manages users and groups. When the UX Login component is configured to use Cognito, users authenticate against a Cognito User Pool and receive tokens Cognito issues. Any Alpha Anywhere application configured for the same User Pool accepts those tokens—users who have already signed in are authenticated automatically across those apps.

Why Cognito?

  • One User Pool, many apps

    Centralize authentication for multiple Alpha Anywhere apps.

  • Federated identity

    Use Google, Facebook, Amazon, any OIDC IdP, or any SAML IdP through Cognito’s federation options.

  • Standards-based

    Integrates via OAuth 2.0/OIDC flows supported by the UX Login component.

What you’ll configure

AWS Cognito
  • User Pool

    Create/configure a User Pool and an app client (callback/logout URLs, allowed OAuth flows/scopes).

  • Optional federation

    Add external IdPs (e.g. Google/Facebook, OIDC, SAML) in Cognito.

UX Login component

Choose Identity Provider = AWS Cognito and supply your User Pool details (domain, client id/secret, scopes, redirect URLs).

Behavior

After a successful Cognito sign-in, the UX Login component receives tokens and establishes an authenticated session in your Security Framework application. If the same browser session then navigates to a different Alpha Anywhere app configured for the same User Pool, the user is signed in automatically (SSO).

Videos

In your UX Login settings, be sure the Redirect/Callback URL you configure in Cognito exactly matches the return URL the component uses. Mismatches will cause Cognito to reject the callback.

See Also