How to add another user to amazon prime code#

Make sure to replace the link with a link to your own Data Privacy policy. Click on “Create a New Security Profile”įill in all three required fields to create your security profile and click “Save.” For the purpose of this article, I am using Amazon’s privacy policy URL.Click on “Login with Amazon” then “Security Profiles”.Connect to and authenticate with your Amazon credentials.Step 1: Create a Login with Amazon (LWA) Security Profileįirst, you need to create a LWA profile for your Alexa skill. You can get a prototype up and running in just a few hours and come back here once it’s published. If you haven’t created a skill yet, please first use the Alexa Skills Kit to build something relatively simple, such as a trivia skill. When using an implicit grant, the user has to manually re-authenticate themselves when attempting to use the service, which, depending on the lifespan of the bearer token, can cause friction for account linking in applications.Īfter authentication is complete and a valid token is received, your application is responsible for managing authorization based on the customer's profile.įigure 1: OAuth data flow Account Linking Step by Stepįollow these steps to configure your Alexa skills with account linking and Login with Amazon.

How to add another user to amazon prime code#

Also, a code grant allows for automatic refreshing of the bearer token after a given expiry, which will be set according to the IDP’s policy. While an implicit grant is often faster and simpler for developers to request, an authorization code grant is generally considered more secure and some IDPs may require it for sensitive information or services.

This usually happens on the backend, between your application server and the IDP service.

On the other hand, an authorization code can only be used to request a bearer token. The bearer token is the token you'll use for accessing information and services. User authentication happens according to the IDP’s policies (username and password, one-time password, biometric, etc.), and upon successful authentication, the IDP generates an implicit grant (aka bearer token) or an authorization code grant. As illustrated below, the user is redirected to the IDP web site. When using OAuth, you delegate user authentication to a third-party Identity Provider (IDP). The service that acts as a public-facing identity provider for Amazon is Login with Amazon. These are sites where nearly everyone has an account, such as Facebook, Google, Twitter, and Amazon. Many organizations rely instead on well-known identity providers, available on the internet. However, at smaller companies, this would require you to build, operate, and maintain your own complex system to manage user identities, passwords, and profiles in a secure and scalable way. At some large companies, an OAuth server is probably already available and Identity Management procedures already in place. The Basics of Account Linking with the Login with Amazon (LWA) ServiceĪccount linking leverages OAuth 2.0 an open protocol that provides a simple, standards-based method for web, mobile and desktop applications to request user authorization from remote servers.Īs a skill developer, you could set up and configure your own OAuth server and identity management system. You can use services such as Amazon Cognito Identity Pools to acquire an AWS Access Key and Secret Key to interact with AWS Services such as Amazon DynamoDB.You can decide what authorizations this user will have in your system.This would allow you to create a contextual skill that behaves according to your user’s preferences and history. You can map this user profile to an existing user in your user database, using the email address as key.There are many ways you can use account linking to enhance your Alexa skills. However, if your custom skill merely needs to keep track of a user to save attributes between sessions, you do not need to use account linking. Custom skills can use account linking if desired. Skills that use the Smart Home Skill API must use account linking (with the authorization code grant flow) to connect the Alexa user with their device cloud account. To accomplish that, you’d use a process called account linking, which provides a secure way for Alexa skills to connect with third-party systems requiring authentication. It would be very convenient for people to access Car-Fu by voice (“Alexa, ask Car-Fu to order a taxi”).

For example, suppose you own a web-based service “ Car-Fu” that lets users order taxis. Some skills require the ability to connect the identity of an Alexa end user with a user in another system, such as Twitter, Facebook, Amazon, and many others. Editor's Note: This post was updated in January 2019.