In the previous blog, we saw how to secure APIs using OAuth2 client credentials grant. This OAuth grant is used mainly for machine to machine or app to app API authorization. If the authorization needs to be performed at an user level, we have to use OpenID Connect which adds…

AWS SSO is a cloud-based single sign-on (SSO) service that makes it easy to centrally manage SSO access to all of your AWS accounts and cloud applications. What is the role of AWS SSO? If you consider any organization, employees in that organization will have access to multiple applications. These applications can be custom built or third-party…

Introduction AWS Cognito is one of the most widely used Identity Provider. There are scenarios where a customer who uses AWS Cognito wants to support social login with Google, Facebook, Twitter or other Identity providers. In this way, a user doesn’t have to create a new profile to access that particular…

In this blog, I will explain how to integrate a Spring Boot web app with AWS Cognito. Spring Boot is one of the most widely used framework in the Java world and AWS Cognito is one of the most widely used Identity providers. Use Case Many organizations around the world build web…

AWS Cognito is one of the most widely used Identity Provider. There are scenarios where a customer who uses AWS Cognito wants to setup SAML federation between Cognito and PingFederate. For ex: As an organization, I can build a product which is integrated with AWS Cognito using SAML. If a…

Introduction AWS Cognito is one of the most widely used Identity Provider. There are scenarios where a customer who uses AWS Cognito wants to setup federation between Cognito and Keycloak. For ex: As an organization, I can build a product which is integrated with AWS Cognito using OIDC. If a customer…

Introduction AWS Cognito is one of the most widely used Identity Provider. There are scenarios where a customer who uses AWS Cognito wants to support social login with Google, Facebook, Twitter or other Identity providers. In this way, a user doesn’t have to create a new profile to access that particular…

AWS API Gateway supports out of the box JWT Authorizer which can be used for security HTTP APIs. JWT Authorizer can be used with any Identity Provider that can generate JWT tokens. All the leading Identity products in the market like AzureAD, AWS Cognito, Okta, Auth0, ForgeRock AM or similar…

AWS Cognito is one of the most widely used Identity Provider. There are scenarios where a customer who uses AWS Cognito wants to setup SAML federation between Cognito and ForgeRock AM. For ex: As an organization, I can build a product which is integrated with AWS Cognito using SAML. If…