Power Platform Community Forum Thread Details

Hi Team,

As per my requirement, Chatbot built on copilot studio has Aws Cognito authentication using Generic oAuth 2. I have embed the chatbot on webapp using iframe. However, Once user sign in web app, Chatbot again asking to login which should be the expected behaivour.

Can you guys please help me how i can enable SSO on embedded chatbot.

I found the resource with Microsoft Entra Authentication. Need some help on Aws cognito authentication.

Categories:

General topics

Hello @CU20081904-0
To enable SSO for your embedded Copilot Studio chatbot with AWS Cognito and Generic OAuth 2.0, you must use a custom canvas integration (not just an iframe).
1. Your web app authenticates users via AWS Cognito and obtains their access token.
2. When the Copilot agent triggers an authentication flow, it sends an OAuthCard containing a secure URL (sasUrl) through the custom canvas.
3. Your canvas middleware intercepts the OAuthCard, extracts the sasUrl, and securely POSTs the Cognito access token to it.
4. Copilot Studio then sets System.User.AccessToken, allowing the chatbot to perform authenticated operations in the user’s context—without showing another login prompt.

Refer>https://learn.microsoft.com/en-us/microsoft-copilot-studio/configure-sso-3p?utm_source=chatgpt.com