Skip to content

Commit 1ee3330

Browse files
lucianpatianLucian Patian
and
Lucian Patian
authored
fixed esthetics (#200)
* added the "How to Create a New Entra ID Enterprise Application and Configure Custom Attributes for SAML Login for AWS Cognito" page * removed image formatting * testing image width * fixed all pictures width * increased width to 85% * replaced the ** for bold text with <strong> * testing the the switch from ** to <strong> * configured the width for the table * reverted the table syntax * fixed list of tasks in Configure User Attributes & Claims for SSO login * small tweaks * fixed cognito userpool id reply url syntax * fixed ordering list for Configure User Attributes & Claims for SSO Login * moved the save changes as a bullet point * removed numbering from headers * improved esthetics --------- Co-authored-by: Lucian Patian <[email protected]>
1 parent 951dd59 commit 1ee3330

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

_posts/2024-10-08-EntraID-SAML.md

+6-6
Original file line numberDiff line numberDiff line change
@@ -11,10 +11,10 @@ header-img: "images/aws-cognito-security/awsblogpost_bg8.png"
1111

1212
# How to Create a New Entra ID Enterprise Application and Configure Custom Attributes for SAML Login for AWS Cognito
1313

14-
When integrating Entra ID (formerly Azure AD) with AWS Cognito for SAML login, it's important to use a unique attribute to identify users. In this guide, we'll walk you through the steps to create a new Enterprise Application in Entra ID and configure a custom attribute named "user.objectid". This attribute ensures that user identities remain consistent even if other attributes, such as last names, change.
14+
When integrating Entra ID (formerly Azure AD) with AWS Cognito for SAML login, it's important to use a unique attribute to identify users. In this guide, we'll walk you through the steps to create a new Enterprise Application in Entra ID and configure a custom attribute named <code>user.objectid</code>. This attribute ensures that user identities remain consistent even if other attributes, such as last names, change.
1515

16-
## Why use "user.objectid"?
17-
The "user.objectid" attribute is unique to each user in Entra ID and does not change, even if other user attributes are updated. This is particularly important for scenarios where an employee changes their last name, as other attributes will be updated with the new value. Using "user.objectid" prevents the creation of a new local user in your application and ensures that existing user data is preserved.
16+
## Why use <code>user.objectid</code>?
17+
The <code>user.objectid</code> attribute is unique to each user in Entra ID and does not change, even if other user attributes are updated. This is particularly important for scenarios where an employee changes their last name, as other attributes will be updated with the new value. Using <code>user.objectid</code> prevents the creation of a new local user in your application and ensures that existing user data is preserved.
1818

1919
## Steps to Create a New Enterprise Application in Entra ID
2020

@@ -41,8 +41,8 @@ Create the connection between Entra ID and your application by setting the login
4141
2. **Edit Basic SAML Configuration**
4242
* Edit the **Basic SAML Configuration**.
4343
* Add the **Identifier (Entity ID)** and **Reply URL (Assertion Consumer Service URL)**.
44-
* The **Identifier (Entity ID)** should follow the format: urn:amazon:cognito:sp:"Cognito_userpool_ID".
45-
* The **Reply URL (Assertion Consumer Service URL)** should follow the format: https://Cognito_domain_URL/saml2/idpresponse.
44+
* The **Identifier (Entity ID)** should follow the format: urn:amazon:cognito:sp:<code>cognito_userpool_id</code>.
45+
* The **Reply URL (Assertion Consumer Service URL)** should follow the format: https://<code>cognito_domain_url</code>/saml2/idpresponse.
4646
* **Save the changes** to the Basic SAML Configuration.
4747

4848
3. **Save the changes** to the Basic SAML Configuration.
@@ -64,7 +64,7 @@ Assign the users and groups that should have permissions to log in to your appli
6464
<img src="/images/entra_cognito/sso_add_users.png" alt="Add Users for SSO" style="width: 85%; display: block; margin: 0 auto;">
6565
</a>
6666

67-
### 4. Configure User Attributes & Claims for SSO Login
67+
### Configure User Attributes & Claims for SSO Login
6868

6969
Configure which Entra ID attributes should be used to log in to your application.
7070

0 commit comments

Comments
 (0)