MDAA TS Docs
    Preparing search index...

    Authentication configuration for the GAIA v2 user pool and client. Selects the identity provider (Cognito-native, external OIDC such as Entra ID, or both) and controls OAuth callback/logout URLs, Cognito domain, attribute mapping, and optional WAF and managed-login branding.

    interface AuthenticationProps {
        cognitoAddAsIdentityProvider?: boolean;
        cognitoBrandingFileLocation?: string;
        cognitoDomain?: string;
        cognitoFeaturePlan?: FeaturePlan;
        cognitoStandardThreatProtectionMode?: StandardThreatProtectionMode;
        entraIdOIDCConfiguration?: EntraIdOIDCProps;
        existingPoolClientId?: string;
        existingPoolDomain?: string;
        existingPoolId?: string;
        oAuthCallbackUrls?: string[];
        oAuthLogoutUrls?: string[];
        wafArn?: string;
    }
    Index

    Properties

    cognitoAddAsIdentityProvider?: boolean

    Whether to add Cognito as an identity provider alongside external providers

    cognitoBrandingFileLocation?: string

    Path to JSON file containing Cognito branding configuration. If undefined, default branding will be used. You can configure the branding through the AWS console and then export it using AWS CLI using aws cognito-idp describe-managed-login-branding. (i.e. : aws cognito-idp describe-managed-login-branding --managed-login-branding-id --user-pool-id <POOL_ID> > branding-config.json)

    cognitoDomain?: string

    Cognito domain prefix for hosted UI

    cognitoFeaturePlan?: FeaturePlan

    Cognito feature plan for advanced security features. Defaults to PLUS if not specified

    cognitoStandardThreatProtectionMode?: StandardThreatProtectionMode

    Standard threat protection mode. Defaults to FULL_FUNCTION if not specified

    entraIdOIDCConfiguration?: EntraIdOIDCProps

    Entra ID OIDC configuration for enterprise authentication

    existingPoolClientId?: string

    Existing User Pool Client ID to use instead of creating new one

    existingPoolDomain?: string

    Existing User Pool Domain to use instead of creating new one

    existingPoolId?: string

    Existing User Pool ID to use instead of creating new one

    oAuthCallbackUrls?: string[]

    OAuth callback URLs for authentication flow

    oAuthLogoutUrls?: string[]

    OAuth logout URLs for authentication flow

    wafArn?: string

    WAF ARN to associatiate with cognito.