We have a webapp that presently supports username-password login flow. We take the credentials and get the tokens from AWS Cognito. The tokens are then used to authenticate further requests from our webapp to app backend.

We are planning to add sso flow to our webapp too. After figuring out…