How to use AWS Cognito as Single-sign-on?

Question

I have 2 sites:

• user registration, login and other stuff (will create users in cognito user pool)
• user profile (self-care)

Both sites are in different domain. How can I implement SSO between both sites?

Answer 1

Yes you can do so in the following way

• Login is done on the first site & you get a token
• Use this token on 2nd site

The problem would be passing token(with an expiry value) from site A to B securely. There is no built in SSO facility provided by Cognito. You would have to manage the encrytion, storage & transfer of tokens yourself.