Cognito

• Cognito provides authentication, authorization, and user management for your web and mobile apps.

• Your users can sign in directly with a user name and password, or through a third party such as Facebook, Amazon, Google or Apple.

User Pools - Authentication

• A user pool is a user directory in Cognito.

• With a user pool, your users can sign in to your web or mobile app through Cognito.

• Your users can also sign in through social identity providers like Google, Facebook, Amazon, or Apple, and through SAML identity providers.

• Whether your users sign in directly or through a third party, all members of the user pool have a directory profile that you can access through a SDK.

Identity Pools (Federated Identities) - Authorization

• Cognito identity pools (federated identities) enable you to create unique identities for your users and federate them with identity providers.

• With an identity pool, you can obtain temporary, limited-privilege AWS credentials to access other AWS services.

• Cognito identity pools support the following identity providers:

  • Public providers: Login with Amazon, Facebook, Google, Apple.

  • Cognito user pools

  • Open ID Connect Providers

  • SAML Identity Providers

  • Developer Authenticated Identities