# Custom Login Flow: AWS Cognito SSO (via Passwordless Signin) - Is this possible?

**URL:** <https://meta.discourse.org/t/custom-login-flow-aws-cognito-sso-via-passwordless-signin-is-this-possible/203406>\
**Category:** SSO\
**Created:** [September 13, 2021, 2:56pm UTC](https://meta.discourse.org/t/custom-login-flow-aws-cognito-sso-via-passwordless-signin-is-this-possible/203406 "2021-09-13T14:56:36Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![xprmnts](https://avatars.discourse-cdn.com/v4/letter/x/4af34b/32.png) [@xprmnts](https://meta.discourse.org/u/xprmnts)\
**Post date:** [September 13, 2021, 6:07pm UTC](https://meta.discourse.org/t/custom-login-flow-aws-cognito-sso-via-passwordless-signin-is-this-possible/203406/3 "2021-09-13T18:07:36Z")

</div>

Hi Jay,

Thanks for the reply.

To clarify.

The flow on our app (not discourse) is passwordless - user enters email → receives a 6 digit code in email → enters code → signs in

To enable this we have lambda triggers that define/create and verify the auth challenges. Further, the ui is custom (i.e. not provided by aws amplify)

 ![image](https://global.discourse-cdn.com/meta/original/3X/9/9/9986473d2d90b745b124a841f93b1731324c880c.png)

What we want is the discourse sign in process to be the same. I attempted to use the same cognito app client configuration for discourse but get this error page

 ![image](https://global.discourse-cdn.com/meta/original/3X/2/f/2f74b4c247035788280c1f95dcdfda96437ba91c.png)  
(the network call isn’t very helpful from cognito about this error)

---

_[View the full topic](https://meta.discourse.org/t/custom-login-flow-aws-cognito-sso-via-passwordless-signin-is-this-possible/203406)._