Goal

After following this tutorial, you will have set up UserSync together with our AWS app. UserSync will create or update the user during login with the data from your Identity Provider.

If you need a Just-In-Time setup (create/update users with the claims sent by the load balancer), please see here.

Prerequisites

• AWS ALB & Amazon Cognito Authentication version >= 2.x

• A configured UserSync connector. Please find the latest documentation for this here https://wiki.resolution.de/doc/usersync/latest

Step-By-Step Guide

After setting up a UserSync connector, please follow these steps:

1. Go to the AWS ALB & Amazon Cognito Authentication configuration and scroll down to the User Provisioning section. Tick Update with UserSync to show the UserSync settings.
   

   

   
   
   
   

2. Click the Which UserSync connector do you want to use?. Dropdown and choose the connector you have configured before (Okta for this example).
   

   

   
   

   
   

3. Now, we must configure the UserSync lookup attribute. This is how UserSync searches remotely for the user. The value depends on the identity provider.
   Please see the table below for the respective value:
   
   

   
   Click Edit to continue

   

   
   

   
   

4. If you need to adjust the value, click Edit and replace the standard configuration with the name from the table above.
   

   

   
   
   

5. Save your configuration

When logging in, your user should now be updated or created by the UserSync connector.