Cognito
Last updated
Was this helpful?
Last updated
Was this helpful?
If you have an existing user credential base using Amazon Cognito you may re-use that user base and let your existing users single sign on to ngSurvey using their Cognito credentials.
The following steps will show you how to configure a new Cognito application working with ngSurvey.
In your existing user pool go to the App Integration tab
If you didn't setup a domain yet setup either a Cognito Domain or a custom domain.
.
Create a new application client, the client application must be a Public client have its Client secret set as following:
You will also need to set a callback URL that will redirect back to your ngSurvey site's login page.
Make sure that the OpenID scopes Email and Profile are set
Once this is done create the application client
In order to setup Cognito in ngSurvey you will need the application Client ID and the Issuer. The client Id can be found in your App Client list.
The Issuer URL is composed of the User PoolID and the Zone (eg: eu-central-1) in which the pool is running eg:
https://cognito-idp.[ZONE].amazonaws.com/[PoolID]
The user pool id can be found from your pool overview screen.
Once you have gathered both properties you can set them in OpenID tab of the system / settings page of ngSurvey
That's it! ngSurvey is now configured to single sign on your existing Cognito users along the built in ngSurvey users.
If you turn single sign-on on make sure to first log with an Cognito account and assign this account admin privileges or in ngSurvey from the access control.
Using the auto-link property on and you can automatically map a role or a group to each new Cognito user that is connecting to ngSurvey.
