Revision history [back]

To implement AWS Cognito for multiple tenants using Google Single Sign-On, you can follow these steps:

1. Create a Cognito user pool for each tenant:

   • Sign in to the AWS Management Console and navigate to the Cognito service.
   • Click on "Manage User Pools" and select "Create a User Pool" button.
   • Enter the name and any other required details for the user pool. Repeat this step for each tenant.

2. Enable Google as an identity provider in each user pool:

   • In each user pool, click on "Identity providers" and select "Google".
   • Follow the prompts to enter the necessary information for Google login integration.

3. Set up tenant-specific OAuth 2.0 client IDs for Google login:

   • For each tenant, create a new OAuth 2.0 client ID in your Google Developers Console.
   • Obtain the client ID and client secret.

4. Configure each user pool to use the correct Google OAuth 2.0 client ID for its tenant:

   • In each user pool, click on "App client settings" and select the corresponding app client.
   • Go to the "Identity providers" tab and enter the tenant-specific client ID and secret.

5. Assign roles and permissions to users and groups within each user pool:

   • Define roles and assign permissions to users and groups within each user pool as needed.

6. Test authentication:

   • Test your integration by logging in with a user from each tenant.

By following these steps, you can successfully integrate AWS Cognito and Google Single Sign-On for multiple tenants.