Documentation
Demos
Support
Blog
Start Free Trial
Search results

Amazon Cognito support for SSO authentication

The Bold BI application supports the addition of users using the Amazon Cognito provider. By importing them, you can share the dashboards and email exported dashboards to them.

NOTE: This feature is available in Bold BI Embedded Analytics but not in Cloud Analytics Server.

How to register the Bold BI application in Amazon Cognito

This section explains how to perform Single Sign-On for users in Amazon Cognito using the Bold BI application.

NOTE: This configuration needs to be done on the Amazon Cognito website.

Prerequisites

  • An admin account in Amazon Cognito.
  • An user pool in Amazon Cognito.
  • Install Bold BI application.

Steps to register the Bold BI application

  1. Please login to the Amazon Cognito website using an admin account. Once logged in, open the console and click on Manage User Pool.

    Manage user pool

  2. Please click on App Clients located under General Settings in the left side menu, and proceed to add the application.

    Add application

  3. Please save the App client name and click on Create app client.

    Create client

  4. Click on the Show details button to access the Client Secret.

    Application details

  5. Please use the App client id and App client secret as shown in the screenshot below.

    Client details

  6. Click on App client settings under App integration in the left side menu and add the Callback URL(s).

    Application redirect uri

  7. The Callback URL(s) must be the URI in the settings of your Bold BI application, as shown in the following screenshot.

    Redirect URI

After successfully registering in Amazon Cognito, save these settings on the Bold BI settings page to enable this authentication..

Enable Amazon Cognito support for authentication in Bold BI

Configure the settings in Bold BI, as shown in the following snapshot, to enable authentication using Amazon Cognito.

Amazon settings

The fields that need to be saved in Bold BI to enable Amazon Cognito for authentication are explained below.

Provider Name It represents the name of the authentication provider to be displayed in the login page.
Provider Logo It represents the logo of the authentication provider to be displayed in the login page.
Authorization Endpoint It should be in the format https://AUTH_DOMAIN/oauth2/authorize
Please refer blog for more details.
Token Endpoint Method POST
Token Endpoint It should be in the format https://AUTH_DOMAIN/oauth2/token
Please refer blog for more details.
User Information Endpoint Method GET
User Information Endpoint It should be in the following format https://AUTH_DOMAIN/oauth2/userinfo. Please refer this documentation, for more details.
Client ID The Client ID you get after registered the Bold BI application in Amazon Cognito website.
Client Secret The Client Secret you get after registered the Bold BI application in Amazon Cognito website.
Scopes openid, profile, email
Logout Endpoint It is the endpoint in the Amazon Cognito website that signs the user out.
Email This must be the field name, in which email will be present when deserializing the token.

Configure Amazon Cognito Group Import Settings in Bold BI

Configure the group import setting in Bold BI using Cognito AWS, as shown in the image below,

Cognito AWS

NOTE: Only the IAM User can import Cognito AWS groups.

The User Pool Id and Region can be found in the general settings of your user pool in the Cognito AWS console.

AWS User Pool Id

To generate an Access Key and Access Secret, please follow the link: AWS IAM User Guide - Creating Access Keys

Previous
Next