While AWS Cognito offers a managed login option with a hosted UI, it also supports a more flexible integration approach via Lambda triggers which can be useful if you require more customization and control in building your UI.

With this second approach, you can integrate Authsignal to rapidly implement passwordless authentication features - either by dropping in our pre-built UI for a simple low-code integration, or by using our Client SDKs if you need full control over crafting your own UI.

Using the Authsignal pre-built UI

The Authsignal pre-built UI is a low-code integration option which can be used to rapidly implement passwordless authentication, including passkeys, email OTP and magic link, SMS and WhatsApp OTP, and facial biometrics.

Implementing WhatsApp OTP using the Authsignal pre-built UI

The following guides for integrating the pre-built UI with AWS Cognito are available.

Amplify doesn’t work well with redirects due to the way it maintains state between requests, so the Amplify guide uses the pre-built UI in popup mode. The AWS SDK works well with either mode, so those guides use redirect mode.

Using Authsignal Client SDKs

Authsignal Client SDKs for web and mobile offer a simple integration option for adding passkeys and other passwordless authentication methods to your web or native mobile app.

Implementing passkey sign-in in a native mobile app using Authsignal Client SDKs

The following guides for integrating client SDKs with AWS Cognito are available.

Advanced scenarios

In addition, the following guides show how to adapt your AWS Cognito integration to utilize more advanced Authsignal features, such as configuring rules to implement adaptive MFA.