Skip to main content

Getting Started with the Illumio Console

Configuring Amazon Cognito as an IdP

Follow these steps to configure Amazon Cognito as an external identity provider (IdP) in the Illumio Console's Okta instance via OIDC protocol.

  1. Go to the Amazon Cognito console (https://console.aws.amazon.com/cognito/home). If prompted, enter your AWS credentials.

  2. Create a user pool by clicking Create user pool. You might need to select User Pools from the left navigation pane to reveal this option.

  3. In Configure sign-in experience, under Cognito user pool sign-in options, select Email only, and click Next.

  4. In Configure security requirements:

    1. Under Multi-factor authentication, choose No MFA.

    2. Under User account recovery:

      1. Select Enable self-service account recovery.

      2. Select Email only for Delivery method for user account recovery messages.

    3. Click Next.

  5. In Configure sign-up experience, determine how a new user verifies their identity when signing up.

    Under Required attributes, confirm that email is specified, and from the Additional required attributes menu, select family_name (surname) and given_name (first name).

  6. In Configure message delivery, choose the settings you prefer. Note the prerequisites for sending email with Amazon SES.

  7. On Integrate your app:

    1. Enter a name in user pool name.

    2. Under Initial app client, confirm that App type is set to Public client.

    3. Enter a name in App client name.

    4. Under Client secret, you can choose whether you want to generate a client secret or not.

    5. Expand Advanced app client settings, and under this section set up various client app authentication flows:

      1. For Authentication flows, choose ALLOW_USER_SRP_AUTH.

      2. Choose a session duration and the various token expirations as you wish.

      3. Under the optional Advanced security configurations, we recommend Enable token revocation and Prevent user existence errors.

    6. Click Next.

  8. At Review and Create, review your user pool details, and when satisfied click Create user pool.