{"id":675,"date":"2026-04-12T08:56:46","date_gmt":"2026-04-12T07:56:46","guid":{"rendered":"https:\/\/entertainmentnews.site\/index.php\/2026\/04\/12\/how-to-test-sso-authentication-with-cognito-and-oidc-providers\/"},"modified":"2026-04-12T08:56:48","modified_gmt":"2026-04-12T07:56:48","slug":"how-to-test-sso-authentication-with-cognito-and-oidc-providers","status":"publish","type":"post","link":"https:\/\/entertainmentnews.site\/index.php\/2026\/04\/12\/how-to-test-sso-authentication-with-cognito-and-oidc-providers\/","title":{"rendered":"How to Test SSO Authentication with Cognito and OIDC Providers"},"content":{"rendered":"
\n

The topic How to Test SSO Authentication with Cognito and OIDC Providers<\/strong> is currently the subject of lively discussion \u2014 readers and analysts are keeping a close eye on developments.<\/p>\n

This is taking place in a dynamic environment: companies\u2019 decisions and competitors\u2019 reactions can quickly change the picture.<\/p>\n

This guide covers the admin setup for SSO authentication built with Django and AWS Cognito. The full reference implementation is available on GitHub: django-cognito-sso-demo.<\/p>\n

To ensure SSO works correctly in your application, you must complete the following steps:<\/p>\n

This is required for group validation to function properly in SSO.<\/p>\n

The name must match the \u201cgroups\u201d claim used in all OIDC providers that will be included in your application SSO.<\/p>\n

After setting up the Admin Panel, we are ready to test SSO authentication.<\/p>\n

Azure Single Sign-On (SSO) Setup: A Step-by-Step Guide
\n\u00a0
\nOkta Single Sign-On (SSO) Setup: A Step-by-Step Guide<\/p>\n

\"\"<\/figure>\n

Other OIDC providers typically follow a similar setup process.<\/p>\n

Step 1: To log in to your application via the Azure SSO Provider, send a GET request to:<\/p>\n

<cognito_domain>\/login?client_id=<client_id>&redirect_uri=<redirect_uri>&response_type=code&scope=openid&state=<client_id><\/p>\n

Step 2 After sending the request, you will be redirected to the Your OIDC Provider login page, in my case it\u2019s Microsoft login page. Click Receive Code.<\/p>\n

Step 4: After successful authentication, you will receive a response with your authentication tokens.<\/p>\n

Step 5: To check if a user was actually created after SSO login, you can:<\/p>\n

After successful logout you will receive a response with your message \u201cLogout successful\u201d.<\/p>\n

\"\"<\/figure>\n

If the user is not a member of the IAM group, the group name is incorrect in the Admin Panel for the SSO Provider, or the user\u2019s email domain is not linked with a rights holder of the app_id, the login attempt will fail, showing an error, where provider 19 is SSO Client Provider ID.<\/p>\n

Templates let you quickly answer FAQs or store snippets for re-use.<\/p>\n

Are you sure you want to hide this comment? It will become hidden in your post, but will still be visible via the comment’s permalink.<\/p>\n

For further actions, you may consider blocking this person and\/or reporting abuse<\/p>\n

Thank you to our Diamond Sponsors for supporting the DEV Community<\/p>\n

Google AI is the official AI Model and Platform Partner of DEV<\/p>\n

DEV Community \u2014 A space to discuss and keep up software development and manage your software career<\/p>\n

Built on Forem \u2014 the open source software that powers DEV and other inclusive communities.<\/p>\n

We’re a place where coders share, stay up-to-date and grow their careers.<\/p>\n