About Amazon Cognito : Link

Create or use an existing Amazon Cognito user pool: Cognito User Identity Pools Link A Cognito User Pool provides a secure user directory to manage sign-up and sign-in functionality. You can create a new pool or select one you’ve already configured.

Create or configure app client of the user pool (https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html).

App type : Select Confidential client.
Enable Generate client secret.
Allowed callback URLs: https://<<your CrushFTP domain>>/SSO_OIDC/
OAuth 2.0 grant types : Authorization code grant
OpenID Connect scopes : OpenID




!!!Continue on: CrushOIDC