如何使用 AWS Cognito 作为身份提供者？

Question

I want to use AWS Cognito as an IdP. My app named "XYZ" has a login screen, which takes user credentials and hits cognito to verify the user's identity using SAML based implementation. I do have a SAML meta data file for AWS Cognito as a service provider but i need the SAML based metadata file for AWS Cognito as an identity provider. Can i even use SAML implementation in this case or do i have to use OIDC?

Answer 1

Create an identity pool using federated auth through the SAML provider.

https://docs.aws.amazon.com/cognito/latest/developerguide/saml-identity-provider.html

Answer 2

AWS Cognito does not support SAML IDP, and is just an OIDC IDP, you can use Auth0 as a middle layer between cognito and the SP.

this should work , where the SAML XML metadata file will be generated by Auth0 (under Application/Addons/Usage/Identity Provider Metadata).