search

aws-amplify / amplify-cli

The AWS Amplify CLI is a toolchain for simplifying serverless web and mobile development.
Apache License 2.0
2.81k stars 821 forks source link

RFC for SAML Integration #5549

Open seanWLawrence opened 4 years ago

seanWLawrence commented 4 years ago

Is your feature request related to a problem? Please describe. Yes, we have several clients that need SAML integration with their Amplify application and without the support, we had to create a custom solution.

Describe the solution you'd like An option in the auth plugin to allow you to set up SAML authentication just like you can with OIDC, username/password, etc.

Describe alternatives you've considered We created a custom solution that requires some manual work in the AWS console and hacky updates to the auto-generated CloudFormation templates that are cumbersome to work with.

With more time, we've considered creating a custom plugin under AWS labs that would allow this, though it seems like a better fit for the auth CLI if it's a common request or need.

Additional context My teammate @brianhubbell at ProServe would like to spec and build this out and just need some guidance on how you think we should approach this - plugin vs adding to auth - and the process for spec-ing the API before building it, etc.

fossamagna commented 3 years ago

I consider that auth has be modified CloudFormation template with PR #123 to support SAML idP, And shoud add feature for user interaction in order to input some parameters for SAML idP to amplify-cli.

rohanliston commented 2 years ago

Is there any update on this? I've got something "working" with amplify auth override, but I can't get the client config to stick due to this bug: https://github.com/aws-amplify/amplify-cli/issues/9885.

As a result, I've had to resort to manual overrides via the AWS console that get overwritten on every release.

rohanliston commented 2 years ago

@seanWLawrence I'd be interested to know some details about the workaround you came up with if possible!