Single Sign-On (SSO) with Amazon Cognito authentication in Bold Reports®

Bold Reports® lets you add users to the application with the Amazon Cognito provider over OAuth 2.0. After you import them, administrators can share reports and email exported reports to them.

How to register the Bold Reports® application in Amazon Cognito

Register the Bold Reports® application in Amazon Cognito to let Amazon Cognito users sign in with single sign-on.

Note: This configuration has to be done on the Amazon Cognito website.

What do I need before I register Bold Reports® in Amazon Cognito?

To register Bold Reports® in Amazon Cognito, you need the following:

  • An admin account in Amazon Cognito.
  • A user pool in Amazon Cognito.
  • Install the Bold Reports® application.

How do I register the Bold Reports® application in Amazon Cognito?

You register the Bold Reports® application as an app client in an Amazon Cognito user pool. Follow these steps:

  1. Log in to the Amazon Cognito website with an admin account, open the console, and then click Manage User pool. Click Manage User Pool

  2. Click App Clients under General Settings in the left-side menu, and then add the application. Click App Client

  3. Save the App client name and click Create app client. Create App Client

  4. Click Show Details to see the Client Secret. Cognito Client Secret

  5. Use the App client id and App client secret, as shown in the following screenshot. Congnito Credential

  6. Click App client settings under App integration in the left-side menu and add the Callback URL(s). Congnito Call Back URL

  7. Make sure the callback URL(s) match the URI in the settings of your Bold Reports® application, as shown in the following screenshot. Login Redirect URI

After successful registration in Amazon Cognito, save these settings in the Bold Reports® settings page to enable this authentication.

Enable Amazon Cognito authentication in Bold Reports®

To enable Amazon Cognito authentication in Bold Reports®, configure the OAuth 2.0 settings as shown in the following screenshot. Configure BoldReports

Which fields do I fill in for Amazon Cognito?

The following table explains the fields required to enable Amazon Cognito for authentication in Bold Reports®:

Provider Name It represents the name of the authentication provider to be displayed on the login page.
Provider Logo It represents the logo of the authentication provider to be displayed on the login page.
Authorization Endpoint It should be in the format https://AUTH_DOMAIN/oauth2/authorize. For more details, see the AWS Cognito Authorization Endpoint Guide.
Token Endpoint Method POST
Token Endpoint It should be in the format https://AUTH_DOMAIN/oauth2/token. For more details, see the AWS Cognito Token Endpoint Guide.
User Information Endpoint Method GET
User Information Endpoint It should be in the format https://AUTH_DOMAIN/oauth2/userinfo. For more details, see the AWS Cognito UserInfo Endpoint Guide.
Client ID The Client ID is obtained after registering the Bold Reports® application on the Amazon Cognito website.
Client Secret The Client Secret is obtained after registering the Bold Reports® application on the Amazon Cognito website.
Scopes openid, profile, email
Logout URI It is an endpoint that logs out the third-party provider.
Email This must be the email of an admin account on the Amazon Cognito website.

Frequently asked questions

Which scopes does Amazon Cognito need in Bold Reports®?

Use the scopes openid, profile, email in the Bold Reports® OAuth 2.0 settings for Amazon Cognito.

Where do I get the Amazon Cognito Client ID and Client Secret?

You get the Client ID and Client Secret after you register the Bold Reports® application on the Amazon Cognito website. Click Show Details on the app client to see the secret.

See also