--- title: Configure AWS Cognito single sign-on description: Tenant administrators can connect an Amazon Cognito user pool to a WoodsPortal implementation so eligible portal users can sign in through the organization --- [![woods-portal-dark](https://digitalwoods.io/hubfs/woods-portal-dark.png)](https://digitalwoods.io/) - [Home](https://woodsportal.digitalwoods.io/) - [Pricing](https://woodsportal.digitalwoods.io/pricing) - [Knowledge Base](https://digitalwoods.io/resources/knowledge-base/install-woodsportal-and-complete-first-time-setup) - [FAQ](https://woodsportal.digitalwoods.io/faq) - [Contact](https://woodsportal.digitalwoods.io/contact) [Get Started Free](https://app.woodsportal.com/login) Book a Demo [![woods-portal-dark](https://digitalwoods.io/hubfs/woods-portal-dark.png)](https://digitalwoods.io/) - [Home](https://woodsportal.digitalwoods.io/) - [Pricing](https://woodsportal.digitalwoods.io/pricing) - [Knowledge Base](https://digitalwoods.io/resources/knowledge-base/install-woodsportal-and-complete-first-time-setup) - [FAQ](https://woodsportal.digitalwoods.io/faq) - [Contact](https://woodsportal.digitalwoods.io/contact) ###### Follow Us Book a Demo [Home](https://digitalwoods.io/) [Knowledge Base](https://digitalwoods.io/resources/tag/knowlege-base) [Authentication & User Access](https://digitalwoods.io/resources/tag/authentication-user-access) Getting Started & Administration - [Manage themes and integrations](https://digitalwoods.io/resources/knowledge-base/manage-themes-and-integrations) - [Use guided help and manage administrator settings](https://digitalwoods.io/resources/knowledge-base/use-guided-help-and-manage-administrator-settings) - [Track jobs, notifications, and product updates](https://digitalwoods.io/resources/knowledge-base/track-jobs-notifications-and-product-updates) - [Create, select, synchronize, and open customer portals](https://digitalwoods.io/resources/knowledge-base/create-select-synchronize-and-open-customer-portals) - [Install WoodsPortal and complete first-time setup](https://digitalwoods.io/resources/knowledge-base/install-woodsportal-and-complete-first-time-setup) Authentication & User Access - [Configure AWS Cognito single sign-on](https://digitalwoods.io/resources/knowledge-base/configure-aws-cognito-single-sign-on) - [Link newly created records to a portal user contact](https://digitalwoods.io/resources/knowledge-base/link-newly-created-records-to-a-portal-user-contact) - [Switch between available hubs and portals](https://digitalwoods.io/resources/knowledge-base/switch-between-available-hubs-and-portals) - [Invite portal users and manage portal access](https://digitalwoods.io/resources/knowledge-base/invite-portal-users-and-manage-portal-access) - [Review and revoke active sessions](https://digitalwoods.io/resources/knowledge-base/review-and-revoke-active-sessions) - [Set up an authenticator app, backup codes, or a passkey](https://digitalwoods.io/resources/knowledge-base/set-up-an-authenticator-app-backup-codes-or-a-passkey) - [Configure multi-factor authentication for a portal](https://digitalwoods.io/resources/knowledge-base/configure-multi-factor-authentication-for-a-portal) - [Verify your email and recover account access](https://digitalwoods.io/resources/knowledge-base/verify-your-email-and-recover-account-access) - [Sign in to a WoodsPortal customer portal](https://digitalwoods.io/resources/knowledge-base/sign-in-to-a-woodsportal-customer-portal) - [Sign in to WoodsPortal as an administrator](https://digitalwoods.io/resources/knowledge-base/sign-in-to-woodsportal-as-an-administrator) Portal Design & Navigation - [Configure right-sidebar record cards](https://digitalwoods.io/resources/knowledge-base/configure-right-sidebar-record-cards) - [Configure portal navigation and menu items](https://digitalwoods.io/resources/knowledge-base/configure-portal-navigation-and-menu-items) - [Configure the portal dashboard and dashboard cards](https://digitalwoods.io/resources/knowledge-base/configure-the-portal-dashboard-and-dashboard-cards) - [Customize portal branding and the login experience](https://digitalwoods.io/resources/knowledge-base/customize-portal-branding-and-the-login-experience) - [Configure a WoodsPortal Open Access CRM page](https://digitalwoods.io/resources/knowledge-base/configure-a-woodsportal-open-access-crm-page) CRM Records & Associations - [Manage record associations and association cards](https://digitalwoods.io/resources/knowledge-base/manage-record-associations-and-association-cards) - [Navigate nested related records in a portal](https://digitalwoods.io/resources/knowledge-base/navigate-nested-related-records-in-a-portal) - [Configure associations and association labels](https://digitalwoods.io/resources/knowledge-base/configure-associations-and-association-labels) - [Build portal record forms with conditional associations](https://digitalwoods.io/resources/build-portal-record-forms-with-conditional-associations) - [Configure record search, filters, pipelines, and stages](https://digitalwoods.io/resources/knowledge-base/configure-record-search-filters-pipelines-and-stages) - [Create and edit CRM records from a portal](https://digitalwoods.io/resources/knowledge-base/create-and-edit-crm-records-from-a-portal) - [Configure table, board, detail, and preview experiences](https://digitalwoods.io/resources/knowledge-base/configure-table-board-detail-and-preview-experiences) - [Control property visibility and editability](https://digitalwoods.io/resources/knowledge-base/control-property-visibility-and-editability) - [Choose and resynchronize HubSpot objects](https://digitalwoods.io/resources/knowledge-base/choose-and-resynchronize-hubspot-objects) Files & Collaboration - [Work with record email and activity history](https://digitalwoods.io/resources/knowledge-base/work-with-record-email-and-activity-history) - [Add record notes, images, and attachments](https://digitalwoods.io/resources/knowledge-base/add-record-notes-images-and-attachments) - [Understand WoodsPortal file storage and download limits](https://digitalwoods.io/resources/knowledge-base/understand-woodsportal-file-storage-and-download-limits) - [Upload files and create folders](https://digitalwoods.io/resources/knowledge-base/upload-files-and-create-folders) - [Preview, download, and copy links to files](https://digitalwoods.io/resources/knowledge-base/preview-download-and-copy-links-to-files) - [Use My Drive and Shared Drive](https://digitalwoods.io/resources/knowledge-base/use-my-drive-and-shared-drive) Permissions - [Configure object and resource permissions](https://digitalwoods.io/resources/knowledge-base/configure-object-and-resource-permissions) - [Create custom portal roles](https://digitalwoods.io/resources/knowledge-base/create-custom-portal-roles) Automation & Integrations - [Copy files and folders with CopyResource](https://digitalwoods.io/resources/knowledge-base/copy-files-and-folders-with-copyresource) - [Automate folder creation with CreateFolder](https://digitalwoods.io/resources/knowledge-base/automate-folder-creation-with-createfolder) - [Add the WoodsPortal client module to HubSpot CMS](https://digitalwoods.io/resources/knowledge-base/add-the-woodsportal-client-module-to-hubspot-cms) - [Understand contact access webhooks](https://digitalwoods.io/resources/knowledge-base/understand-contact-access-webhooks) - [Use WoodsPortal timeline events and workflow actions](https://digitalwoods.io/resources/knowledge-base/use-woodsportal-timeline-events-and-workflow-actions) - [Install the WoodsPortal HubSpot app and use CRM cards](https://digitalwoods.io/resources/knowledge-base/install-the-woodsportal-hubspot-app-and-use-crm-cards) Developer Resources - [Choose a WoodsPortal SDK adapter](https://digitalwoods.io/resources/knowledge-base/choose-a-woodsportal-sdk-adapter) - [Use the WoodsPortal JavaScript SDK and WoodsCLI](https://digitalwoods.io/resources/knowledge-base/use-the-woodsportal-javascript-sdk-and-woodscli) Content Index Tenant administrators can connect an Amazon Cognito user pool to a WoodsPortal implementation so eligible portal users can sign in through the organization's configured identity experience. ## Before you begin - Use an AWS account with permission to configure Amazon Cognito in the selected AWS Region. - Use WoodsPortal administrator access to the Integration Manager in https://app.woodsportal.com. - Prepare a safe test user whose email address matches the intended portal user. - Copy the exact callback URL shown by WoodsPortal. Do not construct or shorten it manually. ## Create or prepare the Cognito user pool - In AWS, open Amazon Cognito and select the Region that will host the user pool. - Create a user pool or open the pool intended for WoodsPortal users. - Configure email as a sign-in or required identity attribute when that matches the portal's identity policy. - Configure the pool's verification, password, and multi-factor policies according to your organization's security requirements. - Create a Cognito hosted UI domain for the user pool and record the exact domain and Region. ## Create the app client - Create a confidential app client that generates a client secret. - Enable the authorization code grant for the hosted UI. - Add the exact WoodsPortal callback URL shown in the Integration Manager. - Add an approved sign-out URL if your implementation requires one. - Enable the OpenID Connect scopes openid, email, and profile. - Save the client ID and client secret in an approved password or secrets manager. ## Connect Cognito to WoodsPortal - In https://app.woodsportal.com, select the intended portal and open the Integration Manager. - Open the AWS Cognito or OpenID Connect configuration available for that portal. - Enter the selected AWS Region, Cognito hosted UI or issuer information, client ID, and client secret exactly as requested. - Confirm that the callback URL in AWS exactly matches the value shown by WoodsPortal. - Save the connection and use the available test or sign-in flow with the safe test user. ## Test the portal-user experience - Open the customer portal URL supplied by your organization and enter the test user's email address. - Choose the configured single sign-on method when it appears. - Complete the Cognito hosted sign-in flow. - Confirm that the user returns to the intended customer portal and can access only the permitted records and resources. ## Troubleshooting - If Cognito reports a callback mismatch, compare the full callback URLs character by character, including protocol, path, and trailing slash. - If the sign-in option is missing, confirm that the connection is enabled for the intended portal and user. - If authentication succeeds but portal access fails, verify the HubSpot contact, Woods Portal Access value, Primary Company relationship where used, invitation state, and assigned portal role. - If tokens are rejected, confirm the Region, hosted UI domain or issuer, app client ID, client secret, and enabled openid, email, and profile scopes. - Rotate an exposed client secret in AWS and update the stored WoodsPortal connection before testing again. \[Visual placeholder: Cognito user pool, app client, and WoodsPortal Integration Manager | Use a safe test user and redacted client secret | Configure the hosted UI, callback URL, and OIDC scopes, then test sign-in | The user returns to the intended customer portal.\] Share this article: Knowledge Base ## More from Knowledge Base [View All Articles](https://digitalwoods.io/resources/tag/knowlege-base) ### [Automation & Integrations Copy files and folders with CopyResource HubSpot administrators can use the WoodsPortal CopyResource workflow action to copy a file or folder to another File Manager location and associate the copied ... Read resource →](https://digitalwoods.io/resources/knowledge-base/copy-files-and-folders-with-copyresource) ### [Automation & Integrations Automate folder creation with CreateFolder HubSpot administrators can use the WoodsPortal CreateFolder workflow action to create a folder in HubSpot File Manager and associate that folder with the ... Read resource →](https://digitalwoods.io/resources/knowledge-base/automate-folder-creation-with-createfolder) ### [Portal Design & Navigation Configure right-sidebar record cards Right-sidebar cards can give portal users quick access to related records or contextual destinations while they work with a primary record. Read resource →](https://digitalwoods.io/resources/knowledge-base/configure-right-sidebar-record-cards) ### [Portal Design & Navigation Configure portal navigation and menu items Administrators can organize portal navigation around the records, resources, and external destinations that customers need, using clear customer-facing labels ... Read resource →](https://digitalwoods.io/resources/knowledge-base/configure-portal-navigation-and-menu-items) ### [Portal Design & Navigation Configure the portal dashboard and dashboard cards Administrators can build a useful landing experience by enabling dashboard cards, choosing their layout, and presenting customer-relevant text, CRM values, ... Read resource →](https://digitalwoods.io/resources/knowledge-base/configure-the-portal-dashboard-and-dashboard-cards) ### [Portal Design & Navigation Customize portal branding and the login experience Tenant administrators can align a WoodsPortal implementation with their organization by configuring portal imagery, accessible labels, login-page copy, and an ... Read resource →](https://digitalwoods.io/resources/knowledge-base/customize-portal-branding-and-the-login-experience) Built for HubSpot Teams ## Revolutionize How Your Customers Interact With Your Data. Get started with WoodsPortal today or book a demo with our team. Book a Demo [Get Started Free](https://app.woodsportal.com/login) ![](https://digitalwoods.io/hubfs/woods-portal-dark.png) - Dashboard - Contacts - Companies - Tickets - Documents - Requests Welcome ![Footer shape](https://digitalwoods.io/hubfs/s1-shape-1.webp) [![woods-portal-dark](https://digitalwoods.io/hubfs/woods-portal-dark.png)](https://digitalwoods.io/) #### Secure Custom-Branded Portal - Built Natively for HubSpot Give your clients secure access to CRM records, files, and updates — with full design control from within HubSpot CMS. ##### Product - [Home](https://woodsportal.digitalwoods.io/) - [Pricing](https://woodsportal.digitalwoods.io/pricing) - [Blog](https://digitalwoods.io/resources) - [Knowledge Base](https://digitalwoods.io/resources/tag/knowlege-base) - [FAQ](https://woodsportal.digitalwoods.io/faq) ##### Company - [Contact](https://woodsportal.digitalwoods.io/contact) - [Privacy Policy](https://digitalwoods.io/privacy-policy) - [Terms of Service](https://digitalwoods.io/terms-of-service) © 2026 WoodsPortal - All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Admin", "url" : "https://digitalwoods.io/resources/author/admin" }, "dateModified" : "2026-09-18T07:56:39.872Z", "datePublished" : "2026-09-18T07:56:39.000Z", "headline" : "Configure AWS Cognito single sign-on", "mainEntityOfPage" : { "@id" : "https://digitalwoods.io/resources/knowledge-base/configure-aws-cognito-single-sign-on", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://digitalwoods.io/hubfs/digitalWoods%20logo.png" }, "name" : "DigitalWoods Technologies Inc" } } ```