Skip to content

identity-provider.md

Latest commit

 

History

History
26 lines (15 loc) · 1.22 KB

identity-provider.md

File metadata and controls

26 lines (15 loc) · 1.22 KB

Identity Provider

Some applications need their own user authentication system when they can't rely solely on SSO through an external identity provider. This document describes how to configure an identity provider using Amazon Cognito. The identity provider setup process will:

  1. Create an Amazon Cognito user pool and user pool client for managing user accounts
  2. Set up the necessary environment variables for the application service

Requirements

While not strictly required, it's recommended to set up notifications first. Without notifications configured, account verification and password reset emails will use Cognito's default email configuration, which has daily email sending limits.

1. Enable identity provider in application config

Update enable_identity_provider = true in your application's app-config module (infra/<APP_NAME>/app-config/main.tf).

2. Configure identity provider settings

The identity provider configuration is defined in the environment config module in infra/<APP_NAME>/app-config/env-config/identity_provider.tf.

3. Deploy the identity provider

Run the following command:

make infra-update-app-service APP_NAME=<APP_NAME> ENVIRONMENT=<ENVIRONMENT>