Adding Amazon as an identity provider in PingOne
Configure the identity provider connection in PingOne.
Before you begin
You should have the following information ready:
-
Client ID
-
Client secret
Ensure that registration is enabled in the authentication policy. See Editing an authentication policy
Steps
-
In PingOne, go to Integrations → External IdPs.
-
Click Add Provider.
-
Click Amazon.
-
On the Create Profile page, enter the following information:
-
Name: A unique identifier for the IdP.
-
Description: (Optional). A brief description of the IdP.
You cannot change the icon and login button, in accordance with the provider’s brand standards.
-
-
Click Next.
-
On the Configure Connection page, enter the following information:
-
Client ID: The application ID that you copied earlier from the IdP. You can find this information on the Amazon Developer Console.
-
Client secret: The application secret that you copied earlier from the IdP. You can find this information on the Amazon Developer Console.
-
-
Click Save and Continue.
-
On the Map Attributes page, define how the PingOne user attributes are mapped to identity provider attributes.
For more information, see Mapping attributes.
-
Enter the PingOne user profile attribute and the external IdP attribute. For more information about attribute syntax, see Identity provider attributes.
-
To add an attribute, click Add attribute.
-
To use the expression builder, click Build and test or Advanced Expression. See Using the expression builder.
-
Select the update condition, which determines how PingOne updates its user directory with the values from the identity provider. The options are:
-
Empty only: Update the PingOne attribute only if the existing attribute is empty.
-
Always: Always update the PingOne directory attribute.
-
You can map the following attributes provided by Amazon:
-
email
-
name
-
user_id
-
postal_code
-
-
Click Save and Finish.