Practice Test 2 | AWS Certified Solutions Architect Associate | SAA-C03 | Dumps | Mock Test
Your app uses AWS Cognito Identity for authentication and stores user profiles in a User Pool. To expand the availability and ease of signing in to the app, your team is requesting advice on allowing the use of OpenID Connect (OIDC) identity providers as additional means of authenticating users and saving the user profile information. What is your recommendation on OIDC identity providers?
A. This is supported, along with social and SAML based identity providers.
B. This is not supported, only social identity providers can be integrated into User Pools
C. If you want OIDC identity providers, then you must include SAML and social based support as well
D. It’s too much effort to add non-Cognito authenticated user information to a User Pool
Explanation:
Answer: A
- A. OpenID Connect (OIDC) identity providers (IdPs) (like Salesforce or Ping Identity) are supported in Cognito, along with social and SAML based identity providers . You can add an OIDC IdP to your user pool in the AWS Management Console, with the AWS CLI, or by using the user pool API method CreateIdentityProvider.
Incorrect:
- B. Cognito supports more than just social identity providers, including OIDC, SAML, and its own identity pools
- C. You can add any combination of federated types, you don’t have to add them all
- D. While there is additional coding to develop this, the effort is most likely not too great to add the feature
Reference:
- https://aws.amazon.com/cognito/
- https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-oidc-idp.html
- http://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-integrate-with-cognito.html
- https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html
- https://aws.amazon.com/cognito/getting-started/
- https://docs.aws.amazon.com/cognito/latest/developerguide/concepts.html
Comments are closed, but trackbacks and pingbacks are open.