What's the difference between AWS SSO and AWS Cognito?

Question

Let's say I have a few clients: corporation x, y, z. each of those corporation has their employees and their SSO (mostly SAML but can be also OpenId or anything else).

I want to be able to integrate with their SSO so they can log in to my application without giving me their credentials. Something like cloudfoundry UAA. Which one should i use: AWS SSO or AWS Cognito? What's the difference?

Answer 1

I am on the Amazon Cognito team.

Amazon Cognito is our identity management solution for developers building B2C or B2B apps for their customers, which makes it a customer-targeted IAM and user directory solution.

AWS SSO is focused on SSO for employees accessing AWS and business apps, initially with Microsoft AD as the underlying employee directory.

We plan to integrate Cognito User Pools and AWS SSO as part of our roadmap.