About Amazon Cognito : https://aws.amazon.com/cognito/

Create (https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html) or use one of your existing Amazon Cognito user pool: https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html

Create or configure app client of the user pool (https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html).

App type : Select Confidential client.
Enable Generate client secret.
Allowed callback URLs: https://<<your CrushFTP domain>>/SSO_OIDC/
OAuth 2.0 grant types : Authorization code grant
OpenID Connect scopes : OpenID




!!!Continue on: CrushOIDC