13

I am using IdP as Onelogin & aws cognito(SP). SP initiated login working fine. But when i clicked on App Portal/ Home -> on my application, then it redirects to cognito with error prompt "Invalid relayState from identity provider" I checked relay state parameter in One-Login configuration is correct like https://***:81/login which is our login page URL.

enter image description here

Rohit Jadhav
  • 145
  • 1
  • 7

1 Answers1

14

Cognito only supports SP initiated flow.

So the flow must go Cognito Authorize endpoint -> IDP -> back to Cognito.

callo
  • 1,374
  • 8
  • 12
  • You need to login using the Cognito Authorize endpoint such as https://yourDomainPrefix.auth.region.amazoncognito.com/oauth2/authorize?response_type=token&identity_provider=samlProviderName&client_id=yourClientId&redirect_uri=redirectUrl&scope=allowedOauthScopes – Stephane Nov 04 '22 at 13:15
  • Yes! That's mentioned in the article [SAML session initiation in Amazon Cognito user pools](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-SAML-session-initiation.html). – Vikram Singh Saini Jun 22 '23 at 00:31