Identity Center Integration for Authentication

adam-mautz commented 1 year ago

Is this related to a new or existing framework?

React

Is this related to a new or existing API?

No response

Is this related to another service?

Identity Center

Describe the feature you'd like to request

On behalf of a customer, I am requesting that Amplify JS natively integrate with AWS Identity Center. The customer currently has their Active Directory synced with Identity Center and would like to use this connection to supply authentication to their internal apps hosted in AWS Amplify.

Describe the solution you'd like

The preferred solution would be a native integration and option to use groups and members within AWS Identity Center as viable authentication for Amplify apps. This would be used instead of Cognito. Using this solution, the customer can keep the SCIM supported sync of their Active Directory into AWS and have access to those users within internal Amplify apps.

Describe alternatives you've considered

We considered using the Azure AD connection directly with Cognito, but the service does not support SCIM protocol which disqualifies it for security and workflow purposes.

We also considered using custom tokens sent from Azure AD to the Amplify App, but the customer would prefer to use managed AWS services where possible without doing much custom programming, which is why Amplify was selected in the first place.