# Custom Login Flow: AWS Cognito SSO (via Passwordless Signin) - Is this possible?

**URL:** <https://meta.discourse.org/t/custom-login-flow-aws-cognito-sso-via-passwordless-signin-is-this-possible/203406>\
**Category:** SSO\
**Created:** [September 13, 2021, 2:56pm UTC](https://meta.discourse.org/t/custom-login-flow-aws-cognito-sso-via-passwordless-signin-is-this-possible/203406 "2021-09-13T14:56:36Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![xprmnts](https://avatars.discourse-cdn.com/v4/letter/x/4af34b/32.png) [@xprmnts](https://meta.discourse.org/u/xprmnts)\
**Post date:** [October 28, 2021, 2:09pm UTC](https://meta.discourse.org/t/custom-login-flow-aws-cognito-sso-via-passwordless-signin-is-this-possible/203406/4 "2021-10-28T14:09:09Z")

</div>

As a follow up to this if any one is interested:

We essentially had to setup an intermediate oauth server to handle the tokens inspired by this post:  
[https://medium.com/@scott\_84836/adding-aws-cognito-authentication-to-discourse-using-oauth2-basic-f20209ba6162](https://medium.com/@scott_84836/adding-aws-cognito-authentication-to-discourse-using-oauth2-basic-f20209ba6162)

We have a flask/python backend so ended up using: [python-oauth2 · PyPI](https://pypi.org/project/python-oauth2/)

TLDR: can’t do a passwordless setup using cognito using any default means, had to setup lightweight oauth ourselves.

---

_[View the full topic](https://meta.discourse.org/t/custom-login-flow-aws-cognito-sso-via-passwordless-signin-is-this-possible/203406)._