3 ms·
Cognito is for authenticating users while AWS SSO is for authenticating employees. Users don’t usually need to be stored in Active Directory, authenticate to ot
by ianburrell 9y ago
Cognito is for authenticating users while AWS SSO is for authenticating employees. Users don’t usually need to be stored in Active Directory, authenticate to other services with SAML, or assigned groups to control access. AWS SSO should also have better integration with AWS IAM.
- intrasight 9y agoEveryone is a user, and most are employees. So that doesn't really answer my question. Users need to be stored somewhere. The question is, is AD a good place to store them. AD is a standard, is flexible, and has been around a long time. So perhaps I should ask the question "Now that we have AWS SSO, why would I use Cognito?"
- dbolgheroni 9y agoThis blog post has a good explanation: https://stormpath.com/blog/sso-vs-centralized-auth https://stormpath.com/blog/sso-vs-centralized-auth
- yeukhon 9y agoIn some AWS blog posts, AWS discussed how to build a single sign on using cognito.