# Can Discourse act as an OIDC provider for AWS Cognito (Hosted UI)?

**URL:** https://meta.discourse.org/t/can-discourse-act-as-an-oidc-provider-for-aws-cognito-hosted-ui/384677
**Category:** Support
**Created:** [October 4, 2025, 12:57am UTC](https://meta.discourse.org/t/can-discourse-act-as-an-oidc-provider-for-aws-cognito-hosted-ui/384677 "2025-10-04T00:57:35Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![Madushanka](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/madushanka/32/485262_2.png) [@Madushanka](https://meta.discourse.org/u/Madushanka)
#### Post date: [October 4, 2025, 12:57am UTC](https://meta.discourse.org/t/can-discourse-act-as-an-oidc-provider-for-aws-cognito-hosted-ui/384677/1 "2025-10-04T00:57:36Z")

</div>

We are exploring a way to let users sign in to our platform (**[xyz.com](http://xyz.com)**) using the accounts they already have on another platform (**[abc.com](http://abc.com)**) which is powered by Discourse.

Our authentication backend is **Amazon Cognito** , and we’d like to configure Discourse as an OpenID Connect (OIDC) identity provider, so that the Cognito Hosted UI can present “Sign in with Discourse” as a login option.

From what I understand:  
Discourse can act as a client/consumer of OIDC/OAuth2 and supports SSO ( [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true) ), but it’s unclear whether Discourse can act as an OIDC provider, which is what Cognito requires.

So my questions are:

1. Does Discourse support acting as an OIDC provider?
2. If not, are there official plugins/workarounds?
3. What would be the recommended way to let Cognito authenticate users against an existing Discourse instance ([abc.com](http://abc.com)), so that they can log in to another platform ([xyz.com](http://xyz.com)) seamlessly?

Our goal is simply to avoid asking users to create another account when they already have one on our Discourse site.

Any guidance would be greatly appreciated 🙏