Cognito-Azure Entra ID Federation Fails Due to Missing Custom Attribute Mapping

[savinof]

Issue

Federation between Cognito and Azure Entra ID fails with SAML response error due to missing custom attribute chatbot_role in Cognito.

Error Message

Invalid SAML response received: Invalid user attributes: Type for attribute {custom:chatbot_role} could not be determined

Current Behavior

• Federation authentication fails
• Error appears response header
• Manual intervention required to add chatbot_role custom attribute in Cognito

Root Cause

The custom attribute chatbot_role is expected in the SAML response mapping but was not pre-configured in Cognito user pool.

Resolution

Manually added chatbot_role custom attribute in Cognito user pool configuration.