For my first deep-dive tech post, I wanted to tackle something that every developer has wrestled with at some point — Single Sign-On (SSO) authentication. Specifically, I wanted to set up SSO between…

Java Revisited's resource offers insights, tutorials, and resources for Java developers and enthusiasts. Readers can learn about Java programming, JVM internals, and enterprise Java technologies. With articles, tutorials, and code examples, Java Revisited provides  guidance and expertise for mastering the Java language and ecosystem.

Javarevisited

This detailed guide covers the implementation of Single Sign-On (SSO) authentication between a Spring Boot backend and an Angular frontend using AWS Cognito and Azure AD. It discusses challenges such as token claims differences and CORS issues, and presents a dynamic configuration approach to switch between identity providers without code changes. The solution leverages OAuth 2.0 and JWT validation to secure the backend APIs.

Implementing SSO-Based Authentication Between Spring Boot and Angular: A Journey with AWS Cognito and Azure AD

The dynamic config for switching between Cognito and Azure AD is a huge win in multi-tenant setups.
One thing I’ve hit before is that the two providers handle group/role claims differently. Azure AD sticks group IDs in groups, while Cognito may need custom mapping. Normalizing claims on the backend saves headaches.
Also, how did you handle silent token refresh for Angular with both IdPs? That’s always been the trickiest part for me.