Amazon Cognito vs. F5 Distributed Cloud Authentication Intelligence

Well Suited

1. B2C mobile and web apps with a high number of users.
2. Cheaper and cost-effective.
3. If the other pieces of the infra are already using AWS services like Lambda, S3, Pinpoint, etc.

Not Suited For:

1. Advanced use-cases (Biometrics based authentication) Email, and other MFA channels.
2. For any use-cases needing SCIM.
3. Customized flows of SSO, and MFA will need a layer on Lambda and other AWS services.

Incentivized

I think if the analytics was more developed this would be an even better product and a 10/10. There should be more transparency with the results with backing of Data

Incentivized

• Strong integration with React.js and client-side applications
• Easy to bridge Cognito identities with the rest of the AWS ecosystem
• Easy to store user profile data directly in Cognito rather than having to build additional services/endpoints
• Easy integration with AWS Lambda to extend and add sophistication to the service

Incentivized

• Uses a cookie which helps with analytics tracking
• Partnership with Chase is really strong
• Looks to connect the 2 organizations (Southwest and Chase)

Incentivized

• SCIM implementation is not present.
• B2B SaaS use-cases are very hard to configure. More suitable or B2C use-cases.
• Needs more recipes, plugins, SDK's.
• 2FA with Email as an OTP channel is not supported.
• 2 FA using biometrics is not available; can be customised using lambda.

Incentivized

• Analytics is a HUGE place for improvement. We had to set up the analytics on our end via tagging with the cookie that gets put into the file. We also don't really have many updates with DETAIL on the analytics that f5 provides us

Incentivized

Amazon Cognito is easy to use and implement if you don't need to implement custom policies. But if your security team requires something outside the box, then implementation becomes complicated and you risk wasting time. There is no option for customizable regex for passwords, which is a major deficiency. The standard password policy, allow to choose the length of the password, if it should contains at least one number, one special character, one uppercase letter and one lowercase letter.

Incentivized

Community support is excellent, many times even better and quicker then the offical AWS support. I really cannot recommend community support enough! Apart from that the service is relativily easy to use and does not have a huge learning curve. Examples are easy to follow and will help you start using the service.

Incentivized

They are ideal tools to create a secure and unique login experience for our applications. Thanks to its API authorization, Amazon Cognito ensures connections to applications that are secure.It is easy to use and provides easy access to files and applications that you need to complete your goal.

Incentivized

• Amazon Cognito has had a positive impact on our business by allowing us to develop services that require user sign-up and sign-in more rapidly. Not only do we not need to build or maintain these features, but Cognito's implementation is also better than what we would be justified in building ourselves.
• Amazon Cognito makes user management easy. This reduces the time we have to spend supporting users. Non-technical product managers can even use the AWS Console to manage users without requiring support from developers.
• Amazon Cognito is likely more secure than what would be built in-house; a portion of our attack surface is now managed by Amazon.

Incentivized

• Higher Chase Credit card application rate

Incentivized