Summary

In this chapter, you looked at federated access, what it is, and when (and when not) to use it. You also learned about SAML and how it is primarily used for enterprise federations where trusted entities exchange authentication and authorization data.

Finally, as the chapter wrapped up, you reviewed the Amazon Cognito service. You read in depth about the differences between user pools and identity pools and went through the job function for each pool type. You saw how, once a user is authenticated to a user pool, they are issued a JWT. You also learned how user data is stored in the JWT for later use in the user pool.

In the next chapter, you will look extensively at AWS Directory Service and the different varieties of it available to you in AWS.