Amazon Cognito

ModelOp Center Requirements

Following the OAuth 2.0 standard, ModelOp Center requires the following Amazon Cognito configurations for a successful integration:

User pool
Resource server:
1. rs/modelop_client
App clients:
1. gateway-service
2. internal-client
3. external-integration-client

App Name	App Type	Client Secret Required	Authentication Flows	Allowed Callback URLs	OAuth 2.0 Grant Types	OpenID Connect Scopes	Custom Scopes
gateway-service	Confidential client	✔️	Default selection*	`<MOC URL>/login/oauth2/code/gateway-service`	Authorization code grant	email openid profile
internal-client	Confidential client	✔️	Default selection `ALLOW_USER_PASSWORD_AUTH`		Client credentials		rs/modelop_client
external-integration-client	Public client		Default selection	`<MOC URL>/jupyterOauth2ImplicitGrant.html` `<MOC URL>/modelOpWDC.html` `https://oauth.powerbi.com/views/oauthredirect.html`	Implicit grant	email openid profile

*Default selection includes the following authentication flows:

ALLOW_REFRESH_TOKEN_AUTH
ALLOW_CUSTOM_AUTH
ALLOW_USER_SRP_AUTH

Amazon Cognito Guide

For detailed instructions on how to setup Amazon Cognito with the required configurations, please follow the Amazon Cognito: How to create a user pool, resource server and app clients guide.