# Enable authentication for Apple Messages for Business
<a name="enabling-authentication-for-apple-messages-for-business"></a>

To begin the setup process, first navigate to your Identity Provider.

## Identity Provider Configuration
<a name="apple-messages-for-business-identity-provider-configuration"></a>

 The following Amazon Connect domain must be registered as an allowed Redirect URI for the Identity Provider(s) used for authentication: 

```
https://participant.connect.region.amazonaws.com/participant/authentication/update
```

## Integration with Amazon Cognito
<a name="apple-messages-for-business-integration-with-aws-cognito"></a>

 You can [add your Identity Provider(s)](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-provider.html) to an existing Amazon Cognito user pool or create a new [Amazon Cognito user pools](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html).

 Within this user pool you can create an [app client](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html) and select some or all of your Identity Providers. Take note of the app client's client ID. For this app client, the following Amazon Connect domain must be added as an Allowed callback URL: 

```
https://participant.connect.region.amazonaws.com/participant/authentication/update
```

**Note**  
You must select **Don't generate a client secret**  when configuring the Amazon Cognito app client. Only Amazon Cognito app clients without client secrets are supported.

## Configure your Amazon Cognito app client with the Apple Messages for Business Portal
<a name="configuring-your-cognito-app-client-with-the-apple-messages-for-business-portal"></a>

 On **Integrated OAuth2 Authentication**, configure your Amazon Cognito app client client ID as the **Client Identifier** and your Amazon Cognito user pool domain's [authorization endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) as the **OAuth URL**.

![\[Customer authentication for Amazon Cognito user pools.\]](http://docs.aws.amazon.com/connect/latest/adminguide/images/configuring-your-cognito-app-client-with-the-apple-messages-for-business-portal.png)


## Configure your user pools with Amazon Connect
<a name="configuring-your-user-pools-with-connect"></a>

 On the **Customer authentication** page on the Amazon Connect console associate the user pool that will be used for the authentication. 

![\[Customer authentication for Amazon Cognito user pools.\]](http://docs.aws.amazon.com/connect/latest/adminguide/images/configuring-your-user-pools-with-connect.png)


## Enable Amazon Connect Customer Profiles
<a name="apple-messages-for-business-configuring-amazon-connect-customer-profiles"></a>

**Enable Customer Profiles**

 On the **Customer Profiles** page in Amazon Connect console, ensure that Customer Profiles is enabled for your instance. If **No Customer Profiles domain associated with this instance of Amazon Connect.** is displayed, then see [Enable Customer Profiles for your Amazon Connect instance](enable-customer-profiles.md).

![\[Enable customer profiles in the Amazon Connect console.\]](http://docs.aws.amazon.com/connect/latest/adminguide/images/apple-messages-for-business-configuring-amazon-connect-customer-profiles.png)


### Grant Customer Profile permission(s) to security profiles (optional)
<a name="apple-messages-for-business-grant-customer-profile-permissions"></a>

 To grant users (agent, admin) permissions to view/edit/publish Customer Profiles in Agent Workspace, see [Update Customer Profiles permissions for agents](security-profile-customer-profile-agent.md). After permission(s) are granted to security profile(s), users should be able to access the features in the Agent Workspace. 

 For a detailed list of permissions, see [Customer Profiles security profile permissions](security-profile-list.md#customerprofiles-permissions-list). 

## Configure the Authenticate Customer flow block
<a name="apple-messages-for-business-authenticate-customer-flow-block"></a>

For instructions, see [Flow block in Amazon Connect: Authenticate Customer](authenticate-customer.md).