Sign in

v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-142311090.8 KB

Gets an OpenID token, using a known Cognito ID. This known Cognito ID is returned by GetId. You can optionally add additional logins for the identity. Supplying multiple logins creates an implicit link.

The OpenID token is valid for 10 minutes.

This is a public API. You do not need any credentials to call this API.

post/#X-Amz-Target=AWSCognitoIdentityService.GetOpenIdToken

Headers

X-Amz-Target'AWSCognitoIdentityService.GetOpenIdToken' required

Request body

IdentityIdstring required

A unique identifier in the format REGION:GUID.

Loginsobject

A set of optional name-value pairs that map provider names to provider tokens. When using graph.facebook.com and www.amazon.com, supply the access_token returned from the provider's authflow. For accounts.google.com, an Amazon Cognito user pool provider, or any other OpenID Connect provider, always include the <code>id_token</code>.

Response

Success

IdentityIdstring

A unique identifier in the format REGION:GUID. Note that the IdentityId returned may not match the one passed on input.

Tokenstring

An OpenID token, valid for 10 minutes.