AWS Cognito

The following guide explains how to successfully connect Keyless to your AWS Cognito User Pool, so that you will be able to let your users login to your web app through Biometric Authentication

Set up Authentication Identity Provider

To enable Keyless authentication, log in to your AWS Cognito dashboard and follow these steps:

1. Click on Federation > Identity Providers

2. Click on OpenID Connect

3. Insert ClientID, Client Secret and Issuer provided to you by Keyless, and configure the rest as shown in the following picture:

   

   Configure Keyless IdP
4. Click on Run discovery to make sure the IdP can be reached successfully

Set up Enrollment Service Provider

To let your users enroll on Keyless through AWS Cognito, follow these steps:

1. Click on General Settings > App Clients

2. Click on Add another app client

3. Choose an app name (typically keyless_registration) and make sure Generate client secret is checked. Leave the default values for the rest.

4. Send Client ID and Client Secret to Keyless

5. Your configuration should look like the following image:

   

   App Client configuration
6. Click on App integration > App client settings

7. Insert Callback URL(s) and Sign out URL(s) provided to you by Keyless

8. Configure the rest as shown in the following image:

App Client settings

Done

🏁Post Integration