How to authenticate customers during chat with Amazon Connect Customer

This article explains how to implement progressive authentication in Amazon Connect Customer chat, allowing customers to authenticate only when account-specific assistance is needed.

• Use the Authenticate Customer flow block to prompt sign-in during chat without breaking the conversation flow
• Integrate Amazon Cognito user pools for identity management and federated authentication (SAML, OIDC)
• Automatically map authenticated customers to profiles via Amazon Connect Customer Profiles for personalized routing
• Configure four output branches: Success, Timeout, Opted out, and Error for different authentication outcomes
• Implement CSRF protection by validating state parameters on redirect URI pages
• Set authentication timeouts between 3-15 minutes based on customer demographics and sign-in complexity
• Design flows that degrade gracefully when customers opt out or authentication fails

Progressive authentication balances customer experience with security by letting users get quick anonymous help while requiring identity verification only for sensitive transactions.