Federated Sign-In with Social and Enterprise Providers

~8 min read

Letting users sign in with an existing Google, Apple, or corporate identity instead of creating a new password.

Federated Sign-In with Social and Enterprise Providers is a Pro topic

Sign in, then upgrade to Pro or Power to unlock this topic and the full AWS curriculum.

Key points

  • Supports social providers (Google, Facebook, Apple) and enterprise SAML/OIDC providers
  • Cognito handles the provider-specific handshake, then issues normalized JWTs regardless of sign-in method
  • Application code doesn't need separate logic per identity provider — the resulting tokens are uniform
  • Enterprise federation enables SSO for B2B or internal applications using existing corporate identity