Amazon Cognito OpenID Connect Provider
AWS-native CIAM with three feature tiers (Lite/Essentials/Plus). Offers the lowest per-MAU cost at scale and deep AWS ecosystem integration via Lambda triggers.
Features
If you want to compare OpenID Connect features of different providers, please check out the OpenID Connect Providers benchmark.
Looking for Amazon Cognito’s (C)IAM features like MFA, SSO, and user management? View Amazon Cognito on the (C)IAM Identity Providers benchmark.
Frequently Asked Questions
Does Amazon Cognito support the Authorization Code grant type?
Amazon Cognito supports Authorization Code grant type. Read more
Does Amazon Cognito support the Refresh Token grant type?
Amazon Cognito supports Refresh Token grant type. Read more
Does Amazon Cognito support the Client Credentials grant type?
Amazon Cognito supports Client Credentials grant type. Read more
Does Amazon Cognito support the Implicit grant type?
Amazon Cognito supports Implicit grant type. Read more
Does Amazon Cognito support the Token Exchange grant type?
Amazon Cognito does not support Token Exchange grant type. Read more
Does Amazon Cognito support the Client Initiated BackChannel Authentication grant type?
Amazon Cognito does not support Client Initiated BackChannel Authentication grant type. Read more
Does Amazon Cognito support the Device Authorization Grant grant type?
Amazon Cognito does not support Device Authorization Grant grant type. Read more
Does Amazon Cognito support the JWT Bearer Token grant type?
Amazon Cognito does not support JWT Bearer Token grant type. Read more
Does Amazon Cognito support the SAML 2.0 Bearer Assertion grant type?
Amazon Cognito does not support SAML 2.0 Bearer Assertion grant type. Read more
Does Amazon Cognito support the Resource Owner Password Credentials grant type?
Amazon Cognito does not support Resource Owner Password Credentials grant type. Read more
Does Amazon Cognito support the PKCE extension?
Amazon Cognito supports PKCE extension. Read more
Does Amazon Cognito support the PAR extension?
Amazon Cognito does not support PAR extension.
Does Amazon Cognito support the RAR extension?
Amazon Cognito does not support RAR extension.
Does Amazon Cognito support the JAR extension?
Amazon Cognito does not support JAR extension.
Does Amazon Cognito support the Authorization Endpoint endpoint?
Amazon Cognito supports Authorization Endpoint endpoint. Read more
Does Amazon Cognito support the Token Endpoint endpoint?
Amazon Cognito supports Token Endpoint endpoint. Read more
Does Amazon Cognito support the UserInfo Endpoint endpoint?
Amazon Cognito supports UserInfo Endpoint endpoint. Read more
Does Amazon Cognito support the Token Revocation endpoint?
Amazon Cognito supports Token Revocation endpoint. Read more
Does Amazon Cognito support the Token Introspection endpoint?
Amazon Cognito does not support Token Introspection endpoint.
Does Amazon Cognito support the Device Authorization Endpoint endpoint?
Amazon Cognito does not support Device Authorization Endpoint endpoint. Read more
Does Amazon Cognito support the OpenID Connect Discovery Endpoint endpoint?
Amazon Cognito supports OpenID Connect Discovery Endpoint endpoint.
Does Amazon Cognito support the OAuth 2.0 Authorization Server Metadata Endpoint endpoint?
Amazon Cognito partially supports OAuth 2.0 Authorization Server Metadata Endpoint endpoint. Supports through OpenID Connect Discovery
Does Amazon Cognito support the none token endpoint authentication method?
Amazon Cognito supports none token endpoint authentication method.
Does Amazon Cognito support the client_secret_basic token endpoint authentication method?
Amazon Cognito supports client_secret_basic token endpoint authentication method. Read more
Does Amazon Cognito support the client_secret_post token endpoint authentication method?
Amazon Cognito supports client_secret_post token endpoint authentication method. Read more
Does Amazon Cognito support the client_secret_jwt token endpoint authentication method?
Amazon Cognito does not support client_secret_jwt token endpoint authentication method. Read more
Does Amazon Cognito support the private_key_jwt token endpoint authentication method?
Amazon Cognito does not support private_key_jwt token endpoint authentication method. Read more
Does Amazon Cognito support the tls_client_auth token endpoint authentication method?
Amazon Cognito does not support tls_client_auth token endpoint authentication method. Read more
Does Amazon Cognito support the none prompt?
Amazon Cognito supports none prompt. Read more
Does Amazon Cognito support the login prompt?
Amazon Cognito supports login prompt. Read more
Does Amazon Cognito support the consent prompt?
Amazon Cognito supports consent prompt. Read more
Does Amazon Cognito support the select_account prompt?
Amazon Cognito supports select_account prompt. Read more
Does Amazon Cognito support the create prompt?
Amazon Cognito does not support create prompt. Read more
Does Amazon Cognito support the RP-initiated Logout feature?
Amazon Cognito partially supports RP-initiated Logout feature. AWS Cognito has a logout endpoint but it does not conform to the RP-Initiated Logout specification Read more
Does Amazon Cognito support the Dynamic Client Registration Protocol feature?
Amazon Cognito does not support Dynamic Client Registration Protocol feature.
Does Amazon Cognito support the Dynamic Client Registration Management Protocol feature?
Amazon Cognito does not support Dynamic Client Registration Management Protocol feature.
Does Amazon Cognito support the Refresh Token Rotation feature?
Amazon Cognito supports Refresh Token Rotation feature. Read more
Does Amazon Cognito support the Refresh Token Rotation Grace Period feature?
Amazon Cognito supports Refresh Token Rotation Grace Period feature. Read more
Compare with other providers
Note: The current data is based on provider documentation/experience and may not be 100% accurate.