Amazon Cognito is an offering from Amazon Web Services that you can use to manage user accounts. It provides authentication and authorization as well as enabling integration with Security Assertion Markup Language (SAML) and OpenID Connect (OIDC) compatible identity providers.

In this hands-on lab, you will use the Amazon Web Services Management Console to create users, register an application with Amazon Cognito, and test user authentication.

Learning objectives

Upon completion of this lab you will be able to:

• Create a Cognito User Pool, and configure it with various policies
• Create a job to Import users into a User Pool
• Manually add users into the User Pool
• Use the AWS SDK to authenticate users

Prerequisites

Familiarity with the following will be beneficial but is not required:

• Amazon Web Services Management Console
• Amazon Cognito

The following course can be used to fulfill the prerequisites:

• Using Amazon Cognito to Manage Authentication & Authorization to your Mobile and Web Apps

Environment

After completing the lab instructions the environment should look similar to:

Updates

February 16th, 2024 - Updated some instructions and screenshots to reflect the latest user interface changes

January 30th, 2023 - Updated the instructions and screenshots to reflect the latest UI

April 22nd, 2022 - Updated web app in accordance with API change

November 2nd, 2020 - Updated instructions and screenshots to match the updated user interface

January 10th, 2019 - Added a validation Lab Step to check the work you perform in the Lab