Authenticate user from AWS Cognito in Azure API Developer Portal

Question

I am trying to authenticate my users from AWS Cognito pool for Azure API Gateway Developer portal. I am able to render "Azure Active Directory B2C" button on Sign In page. When user is clicking on "Azure Active Directory B2C" button, Cognito authenticator popup is opening. After putting the Email Id and Password, it is taking me to "Complete sign up" page. But I want it should take me directly on Dashboard.

I don't want this page. Also after filling the details, when I click on "Sign up", it is showing error like: "Server error. Unable to send request. Please try again later."

Answer 1

@Rav Thanks for reaching out. When you use external auth provider such as AAD or AD B2C, the first time the user authenticates and tries to sign in to the portal, they are presented with a "sign up" page where the user has to complete their first/last name and email address. This is expected behavior no option to modify it. Once the user signs up successfully by filling the details and pressing "Sign Up", the sign in should complete and subsequent login attempts won't show this sign-up page.

I suggest you use sign-in and sign-up delegation in APIM to delegate user registration. This can be a good option if you already have an existing user database or authentication system that you want to use with APIM.

please refer: https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-setup-delegation

Do let me know if you have any queries.

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.

Answer 2

Hi JananiRamesh, I can understand product have have expected behaviour "external auth provider such as AAD or AD B2C, the first time the user authenticates and tries to sign in to the portal, they are presented with a "sign up" page where the user has to complete their first/last name and email address." Here I am able to do Sign In using the AWS Cognito, I followed this steps https://www.liatrio.com/blog/azure-api-management-okta-integration#cavb8 Here instead of Okta I used AWS Cognito Pool. The problem is, after Sign In with AWS Cognito, it is taking me on Complete Sign Up Page. I entered their Email(Same email I have entered for AWS Cognito Sign In), First Name and Last Name. when I click on "Sign up", it is showing error like: "Server error. Unable to send request. Please try again later."

Also please elaborate about "delegate" Thanks & Regards, Ravinesh