在注册时创建 Cognito 用户池

Question

I have a web app with AWS Amplify for the backend and cognito for the authentication. I want to achieve a multi tenant app.

So a user fills out a registration form and then it should create a seperate user pool and assign this user for this.

When logging in you should provide the tenant id. (Similar to slack with the workspaces) Inside a user pool there should be different roles like legal, admin, appuser, webuser.

I am struggling with creating a user pool... Is there a easy way or a better way to achieve my goal?

Thanks!

Answer 1

Agree with the answer above. To literally answer the quesion, you can create a new pool in Typescript like this. The Params object has a lot of requirements, which you can find in the docs here .

import { CognitoIdentityServiceProvider } from "aws-sdk";
const cog = new CognitoIdentityServiceProvider(); 
const params: CognitoIdentityServiceProvider.Types.CreateUserPoolRequest = {
...
};

cog
  .createUserPool(params)
  .promise()
  .then((result) => {
    console.log("Created", result);
  });

Each user needs to be unique in Cognito, so if you use a single pool, there may be cases where a user registers in one "Tenant", but won't be able to register in another one.

Answer 2

Rather than a separate user pool for each tenant, you could consider a custom attribute for each user, eg tenant-id .

At registration time the user is assigned his tenant-id , which can be provided from a list, cookie, url, or other means.

This value can then consulted to provide the user access and data based on their assigned tenant-id

The challenge with your approach is that the designated user pool for each tenant does not exist initially, making the first registration process dependant on a non existent user pool. This seems like an antipattern for using Cognito. If you start with a global user pool, then spawn a new user pool, the user would have two identies im two user pools.

Alternatively, you could pre-build a custom user pool for each tenant in advance as part of initial tenant provisioning, and use the appropriate user pool for each registration, including the first user.

NB Maximum number of user pools per account is 1,000. This can be increased om request.