Cognito User Pool Vs Federated Identity Pool

One of the reasons for this is because cognito is comprised of two services user pools and identity pools a k a.

Cognito user pool vs federated identity pool. Integrate the identity providers. Cognito user pool handles all of this and as a developer you just need to use the sdk to retrieve user related information. An identity pool is a store of user identity data specific to your account. Right so the difference is based on who was granted access rights.

Amazon cognito identity pools federated identities support user authentication through amazon cognito user pools federated identity providers including amazon facebook google apple and saml identity providers as well as unauthenticated identities. Federated identities that are similar on the surface but different under the hood. To add a social identity provider you first create a developer account with the identity provider. User pools are for authentication identify verification.

Identity pools are for authorization access control. Amazon cognito identity pools provide temporary aws credentials for users who are guests unauthenticated and for users who have been authenticated and received a token. You can use federation for amazon cognito user pools to integrate with social identity providers such as facebook google and login with amazon. Aws cognito userpools granting access to an application one exception is it can also grant access to aws cognito federated identities.

You can use identity pools to create unique identities for users and give them access to other aws services. With an identity pool you can obtain temporary limited privilege aws credentials to access other aws services. Authentication and authorization but do so in very different ways. With a user pool your app users can sign in through the user pool or federate through a third party identity provider idp.

Aws cognito federated identities granting access to amazon services. This is where cognito user pools would come in. Your app users can sign in either directly through a user pool or federate through a third party identity provider idp. These two services solve the same problem i e.

The user pool manages the overhead of handling the tokens that are returned from social sign in through facebook google amazon and apple and from openid connect oidc and saml idps.