User Identity Provider - SAML

[moofish32]

Cognito Identity Providers are not supported as an AWS construct or natively by the User Pool construct. Integrating this new construct with the user pool will resolve challenges correctly setting attribute mutability as warned in the documentation

Use Case

I want to be able to easily integrate a user pool with my company provided SAML IdP. The same will be true for other IdPs supported by Cognito.

Proposed Solution

Correctly model the providers available in the current list. I don't think this is really a stand alone construct, but an integrated function on the user pool. Depending on the variation on the interface this may be require individual methods to avoid JSII limits regarding interface unions.

CDK might look like:

         const userPool: cognito.UserPool = new cognito.UserPool(this, `${id}-pool`, {
            userPoolName: props.name,
            autoVerify: { email: true },
            selfSignUpEnabled: props.allowUserSignUp,
            mfa: cognito.Mfa.OFF,
            requiredAttributes: {
              email: true,
              nickname: true,
              fullname: true,
            },
            lambdaTriggers: { preTokenGeneration: preTokenTrigger },
        });
        userPool.addSamlIdp(mySamlIdpProps); // userPool.addGoogleIdp(myGoogleProps) ...

In that function we will ensure mutable properties from the mapping json are correctly set in the user pool properties. By providing individual functions we'll have type validation.

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

---

This is a 🚀 Feature Request

[TheRealAmazonKendra]

Looks like this has actually been implemented. Closing this issue.

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.