AWS Cogito native vs Federated flow

Amazon Cognito supports both native flows (username/password, SRP, MFA, custom challenges) and federated flows (SAML, OIDC, social IdPs). The choice depends on whether you want Cognito to act as the identity provider itself (native) or as a broker to external IdPs (federated).

https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-authentication-flow-methods.html

https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/choose-an-amazon-cognito-authentication-flow-for-enterprise-applications.html

https://hidekazu-konishi.com/entry/amazon_cognito_federation_implementation_guide.html