Prevent duplicate username from federated logins
I have Cognito setup with login supported from multiple identity providers (Cognito User Pools, Facebook, and Google). In my User Pool configuration I have email used as username. The desired functionality is to have username be unique across all identity providers. i.e. if a user logs in with Facebook and their facebook email is "user@test.com" and then they login with Google and their google email is "user@test.com", either they should not be able to login or their federated identities should be merged.
This is user management for connected devices. I don't want a user to setup a few devices while logged into Facebook, then login with Google and not be able to see their devices from their Facebook account.
I know this gets complicated since you can create a Facebook account with just a phone number.
I know there is a pre-authentication trigger in Cognito User Pool's, but it doesn't seem to be triggering when I login with a federated identity. Is there a trigger than I can use that will fire no matter which identity provider I use (User Pool, Facebook, Google)?
Thanks,
facebook amazon-web-services amazon-cognito aws-userpools asked Nov 28 '18 at 16:47
Nelson.b.austinNelson.b.austin
84342245
add a comment |
I have Cognito setup with login supported from multiple identity providers (Cognito User Pools, Facebook, and Google). In my User Pool configuration I have email used as username. The desired functionality is to have username be unique across all identity providers. i.e. if a user logs in with Facebook and their facebook email is "user@test.com" and then they login with Google and their google email is "user@test.com", either they should not be able to login or their federated identities should be merged.
This is user management for connected devices. I don't want a user to setup a few devices while logged into Facebook, then login with Google and not be able to see their devices from their Facebook account.
I know this gets complicated since you can create a Facebook account with just a phone number.
I know there is a pre-authentication trigger in Cognito User Pool's, but it doesn't seem to be triggering when I login with a federated identity. Is there a trigger than I can use that will fire no matter which identity provider I use (User Pool, Facebook, Google)?
Thanks,
facebook amazon-web-services amazon-cognito aws-userpools asked Nov 28 '18 at 16:47
Nelson.b.austinNelson.b.austin
84342245
add a comment |
I have Cognito setup with login supported from multiple identity providers (Cognito User Pools, Facebook, and Google). In my User Pool configuration I have email used as username. The desired functionality is to have username be unique across all identity providers. i.e. if a user logs in with Facebook and their facebook email is "user@test.com" and then they login with Google and their google email is "user@test.com", either they should not be able to login or their federated identities should be merged.
This is user management for connected devices. I don't want a user to setup a few devices while logged into Facebook, then login with Google and not be able to see their devices from their Facebook account.
I know this gets complicated since you can create a Facebook account with just a phone number.
I know there is a pre-authentication trigger in Cognito User Pool's, but it doesn't seem to be triggering when I login with a federated identity. Is there a trigger than I can use that will fire no matter which identity provider I use (User Pool, Facebook, Google)?
Thanks,
facebook amazon-web-services amazon-cognito aws-userpools asked Nov 28 '18 at 16:47
Nelson.b.austinNelson.b.austin
84342245
I have Cognito setup with login supported from multiple identity providers (Cognito User Pools, Facebook, and Google). In my User Pool configuration I have email used as username. The desired functionality is to have username be unique across all identity providers. i.e. if a user logs in with Facebook and their facebook email is "user@test.com" and then they login with Google and their google email is "user@test.com", either they should not be able to login or their federated identities should be merged.
This is user management for connected devices. I don't want a user to setup a few devices while logged into Facebook, then login with Google and not be able to see their devices from their Facebook account.
I know this gets complicated since you can create a Facebook account with just a phone number.
I know there is a pre-authentication trigger in Cognito User Pool's, but it doesn't seem to be triggering when I login with a federated identity. Is there a trigger than I can use that will fire no matter which identity provider I use (User Pool, Facebook, Google)?
Thanks,
facebook amazon-web-services amazon-cognito aws-userpools facebook amazon-web-services amazon-cognito aws-userpools asked Nov 28 '18 at 16:47
Nelson.b.austinNelson.b.austin
84342245
asked Nov 28 '18 at 16:47
Nelson.b.austinNelson.b.austin
84342245
asked Nov 28 '18 at 16:47
Nelson.b.austinNelson.b.austin
84342245
asked Nov 28 '18 at 16:47
Nelson.b.austinNelson.b.austin
84342245
asked Nov 28 '18 at 16:47
Nelson.b.austinNelson.b.austin
84342245
84342245
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53524319%2fprevent-duplicate-username-from-federated-logins%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53524319%2fprevent-duplicate-username-from-federated-logins%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
