logo
การพัฒนา
ภาพรวมพื้นที่นักพัฒนาพื้นที่ทำงานเอกสาร APIแนวปฏิบัติที่ดีบันทึกการเปลี่ยนแปลง
ค้นหา
ภาษาไทย
AWS Cognito OIDC Configuration Guide
อัปเดตล่าสุด：in about 7 hours

AWS Cognito OIDC Configuration Guide

This guide explains how to configure OIDC integration with AWS Cognito on the GPTBots platform.

Configuration Steps

  1. Sign in to AWS Cognito. Use the top search bar to find Cognito, then click it.
    alt text
  2. If there is no User Pool yet, create a new one.
    alt text
  3. Configure the basic information as shown below.
    alt text
    alt text
  4. After creation succeeds, you will be redirected to this page. Scroll down and click Go to overview.
    alt text
  5. Next, configure App Clients and click the App Client you just created.
    alt text
  6. Find Login pages and click Edit.
    alt text
  7. Go back to the GPTBots platform, click your avatar at the bottom-left, and select Account.
    alt text
  8. Open the SSO tab and click Configure SSO.
    alt text
  9. Select OIDC / OAuth 2.0 and copy the Callback URL shown below.
    alt text
  10. Return to AWS Cognito. Paste the copied value into Allowed Callback URLs and Default redirect URL, and enter https://www.gptbots.ai/signin in Allowed sign-out URLs.
    alt text
  11. Scroll down to OpenID Connect scopes, select openid, email, and profile, then click Save changes.
    alt text
  12. In App Client information at the top, copy the Client ID and Client secret.
    alt text
  13. Go back to GPTBots, check the confirmation box, and click Next.
    Then paste the copied values into Client ID and Client secret.
    Set Name of SSO Service based on your naming preference.
    alt text
    alt text
  14. Return to AWS Cognito, click Overview in the left sidebar, and copy the Token signing key URL.
    alt text
  15. Paste it into Issuer URL in GPTBots, then click Next.

    Note: After pasting, remove the /.well-known/jwks.json suffix and keep only the base URL.

alt text
16. Go back to AWS Cognito to create a user, then click Create user.
alt text
17. Keep the configuration as shown and click Create user.
alt text
18. In the left sidebar, go to Branding > Domain and click Edit.
alt text
19. Select Hosted UI and click Save changes.
alt text
20. Return to GPTBots, choose the organization to authorize, then click Save and Verify.
alt text
21. Finally, save the SSO Login URL and share it with organization members for sign-in. Click Complete to finish setup.
alt text