Amazon Cognito significantly simplifies authentication and user identity management, so organizations don’t have to build and maintain their own authentication platform. I especially like how its User Pools and Identity Pools work together to support user registration and login, MFA, social identity providers, and temporary AWS credentials—all from a single managed service. It also scales automatically, integrates smoothly with serverless architectures, and supports standards such as OAuth 2.0, OpenID Connect, and SAML for enterprise authentication. Review collected by and hosted on G2.com.

The service can get quite complex when you start implementing advanced authentication flows, especially those involving custom authentication challenges, multiple identity providers, and fine-grained IAM role mappings. When something goes wrong, debugging authentication issues often means you need to understand how several Cognito components work together. Review collected by and hosted on G2.com.

Highly scalable and able to handle millions of users with ease which makes it suitable for both small-scale and enterprise-grade applications. Built-in authentication features like MFA, account recovery, and password policy enforcement, tend to be an all-in-one place. Customisation of authentication flows using AWS Lambda triggers makes it easy to accommodate different use cases. Integration with AWS services by native provides a seamless end-to-end solution as it lies under the AWS ecosystem. Cross-platform SDKs available for Web, Mobile(Android, iOS), and RESTful APIs simplified the implementation. Supports integration for third-party identity providers. Review collected by and hosted on G2.com.

The initial setup was tedious and challenging, especially dealing with the IAM policies. Error handling and debugging are very hard where the underlying layer is managed by AWS and needs strong expertise in the AWS ecosystem to even look into logs. Non-user-friendly documentation will confuse with developer who deals with the setup at the initial stage. The option to export the user's data is not there and updating the users in bulk option is also not available. Sometimes "List users" method returns deleted accounts for a few minutes(or hours) from the cache causing some confusion during data validation. Review collected by and hosted on G2.com.

Have lots of third party integration ready Review collected by and hosted on G2.com.

Tutorials/write-ups on integration via code is lacking, e.g. doesn't have full tutorials on using /authorize endpoint to auto redirect, /token to get token etc Review collected by and hosted on G2.com.

It has several options to learn and adopt AWS Cloud, especially security, we can create different roles and assigns different level of access using policies and if a new member has been added we have to just assign him a role with one click and it's done. Review collected by and hosted on G2.com.

To the best of my knowledge, I have not yet come across referring to Security in AWS. Review collected by and hosted on G2.com.

Thanks to AWS Cognito for handling authentication and authorization for many applications I build. I liked the integration with the API gateway Cognito authorizer and also, implemented the Cognito Identity Pool feature, this way I can integrate social Identities for my app and secure my backend resources based on IAM roles. Review collected by and hosted on G2.com.

For now, no such dislike for Cognito, but earlier, it was difficult to add custom logic for Cognito, thanks to Lambda triggers. Review collected by and hosted on G2.com.

One of the standout features of Amazon Cognito is its comprehensive and secure user management capabilities. It simplifies the process of user authentication, registration, and management, offering a seamless and scalable solution for building user-centric applications. Additionally, its integration with other AWS services and compatibility with popular identity providers make it highly versatile and convenient to use. Review collected by and hosted on G2.com.

While Amazon Cognito offers robust user management features, one aspect that could be improved is the complexity of its configuration and setup process. Setting up certain advanced functionalities and customizing user flows may require a deeper understanding of the service, making it slightly challenging for users with limited technical expertise. Additionally, the documentation could benefit from more detailed examples and use cases to further assist users in understanding and implementing complex scenarios. Review collected by and hosted on G2.com.

We had a use case where a random customer will push data to our kinesis stream. Cognito helped us achieve this without much hustle. Review collected by and hosted on G2.com.

Initially we struggled with the documentation. Gradually we get on the track. So yeah, it can be better. Review collected by and hosted on G2.com.

It is easy to use and and anyone can setup. One more thing that I like most is scalability. Review collected by and hosted on G2.com.

We can increase token expiration time so that it will be hussle free. Review collected by and hosted on G2.com.

It is as easy as it can get, so easy to setup too.

It is also highly scalable. Review collected by and hosted on G2.com.

If only we can increase the token expiration time to avoid any hassle. Review collected by and hosted on G2.com.

Amazon Cognito incorporates multiple layers of security to protect user data. It supports various authentication methods, including username/password, multifactor authentication (MFA), and integration with external identity providers like Facebook, Google, or SAML-based systems. It also provides features like secure token management, encryption, and advanced security configurations. Review collected by and hosted on G2.com.

The various components, configurations, and options can be overwhelming, requiring a good understanding of the AWS ecosystem. Review collected by and hosted on G2.com.