AWS Cognito SSO self serve

Introduction

This project serves as a template for anyone wanting to add a self service interface for configuring SSO with AWS Cognito to their application. This project is targeting apps with multi tenant AWS architecture.

Features

• UI built with Vue js
• Ability to configure, update, remove Identity providers
• Ability to view users in a userpool
• CDK template for deploying infrastructure for tenant onboarding

Architecture

Will continute to update this. First starting with the UI and the related infrastructure.

Deployment

Deploymets are handled by Github actions .github/workflows directory.

Requirements

The Github action needs to configure AWS and update the cdk.json file with required env variables

1. In the AWS IAM console create a user that can be used for the action

2. create a credential for this user and copy the credentials and create secret env variables for your github repo. In this case I used repository secrets rather than environment secrents since I only have a dev env.

AWS_ACCESS_KEY_ID

AWS_SECRET_ACCESS_KEY

3. Create the following repo variables.

STACK_NAME

REGION

ACCOUNT_ID

stack name can be found by calling cdk list and the others in your AWS account

When you push changes the actions to run test and deploy will run automatically.

UI

User listings page

User details page

Identity providers management tab

Local development

npm install

Compiles and hot-reloads for development

npm run serve

Compiles and minifies for production

npm run build

Lints and fixes files

npm run lint

Customize configuration

See Configuration Reference.