How can you integrate/federate SSO(SiteMinder) with Amazon Cognito

[sttch01]

Is anyone using AWS Cognito with SiteMinder?

[Karmeng]

Hi Chris,

There is no AWS Cognito runbook available for Siteminder. Therefore, I doubt this is supported.

 

http://www3.ca.com/us/lpg/partners/saas-security-partners.aspx

 

You can check with SSO product manager mehhe02 if this is supported. If we are supported the integration, I expect a documentation (ie: runbook) detail how we can achieve.

 

Regards,

Kar Meng

[Patrick Dussault]

Hi Chris,

 

For integration with SiteMinder, you better ask AWS directly. On their site, they mention possible
integration with SiteMinder, but this is them to explain how it should be integrated as IdP.

 

https://aws.amazon.com/blogs/apn/identity-federation-and-sso-for-saas-on-aws/

 

Further reading :

https://communities.ca.com/thread/241752267

 

Best Regards,
Patrick

[sri rao]

hello experts,

need clarification on the below use-case:

1) users residing in amazon webservices Cognito
2) my company has external partner whose applications are enabled with Siteminder and they have their own identity access management solution.

Q- users of cognito need to gain access to applications that are enabled with siteminder. 
Which is ideal on this usecase --  SAML or OIDC ??

How can this federation be achieved, any inputs will be of great help !

thanks!
sri

[Herbert Mehlhorn]

HI Folks, 

The nature of support for AWS Cognito is noted here:
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/configuring/use-ca-single-sign-on-as-openid-connect-provider/using-siteminder-openid-connect-provider-for-aws-cognito.html

[sri rao]

Herbert,

nice, article !
thanks of posting this document.

Q) Siteminder accessing AWS Cognito service is available only from release 12.8.03 ?
Q) Does any of the prior release of siteminder i.e. 12.8, 12.7 has work around in place to access Cognito userpool ?

Can you please comment on any of the above questions, this will be of great help for us on the on-going implementation - Siteminder & Cognito UserPool.

Thanks !
Sri 

[Herbert Mehlhorn]

HI.... 

The AWS Cognito support was added in the 12.8.03 release.  That is the first release where it is supported.  Code changes in 12.8.03 that enabled this were around the implementation of JWKS endpoint that Cognito would support.    I do not know if there are any workarounds to help with userpool prior to 12.8.03.

[sri rao]

great, thank you for the swift response !

In case if you hear anything on this subject going further, please do post the updates here accordingly..

Thanks !
Sri