Is there a way to remove CognitoUserPool in Identity Providers and remove Sign in/Sign out URLs?

[aedrianescultura]

Which Category is your question related to?
Authentication

Amplify CLI Version
4.29.4

What AWS Services are you utilizing?
Cognito

Provide additional details e.g. code snippets
Is there a way to disable the Cognito User Pool as one of the Identity Providers?
Is there a way to remove a URL in Callback and Sign out URLs section?

[ammarkarachi]

@aedrianescultura you can run amplify update auth to update auth settings for the url. You can remove auth and re-add auth

[aedrianescultura]

@aedrianescultura you can run amplify update auth to update auth settings for the url. You can remove auth and re-add auth

This option: Add/Edit signin and signout redirect URIs does not allow you to remove the redirect URIs. You can only add or edit, but you cannot remove the URI.

[kaustavghosh06]

@aedrianescultura Answers to both your questions:
Q: Is there a way to disable the Cognito User Pool as one of the Identity Providers?
Answer: No - we do not support this as a feature today as we've not seen many customers using this pattern to disable cognito user pool login and only allow social login - I'll mark this as a feature request and if there are more customers needing this we can add it to our CLI flows.

Q: Is there a way to remove a URL in Callback and Sign out URLs section?
Right now, if you have social federation we require you to enter the callback and signout URL's following best practices. What's your use-case of enabling oAuth social federation but not have callback and signout URL's?

cc @renebrandel

[aedrianescultura]

@kaustavghosh06 I do use callback and signout URLs. However, there was an instance where I needed to remove one of the URLs and I did not find a way to do this from the CLI.

[kaustavghosh06]

@aedrianescultura Got it. Yes - the CLI UX doesn't allow for this today when you add multiple URL's. I'm adding this as an enhancement which we can look into. cc @renebrandel
As a workaround/escape-hatch, you can go into the amplify/backend/auth/<resource-name>/parameters.json file and manually update the "CallbackURLs" and "LogoutURLs " present in there.

[aedrianescultura]

@kaustavghosh06 The enhancement would be great. Thanks for the workaround.

[evank28]

Any update on enabling social-only login?

[steffeng]

Regarding the removal of the CognitoUserPool: you can do this in gen2 amplify by overriding the CloudFormation resource:

const backend = defineBackend({ auth, data });
const { cfnUserPool, cfnUserPoolClient } = backend.auth.resources.cfnResources
cfnUserPoolClient.supportedIdentityProviders = cfnUserPoolClient.supportedIdentityProviders?.filter(
  i => i !== 'COGNITO'
)