Register a custom web app in Amazon Cognito
Follow the steps below to register a custom web app in Amazon Cognito.
- 
Sign in to the Amazon Cognito console as an admin. If prompted, enter your AWS credentials. 
- 
Select User Pools. 
- 
Select an existing user pool from the list, or create a user pool. 
- 
Select the App integration tab. 
- 
Under App client list, select Create app client. 
- 
Under App type, select Public client. 
- 
Enter Cognite Data Fusion as the App client name. 
- 
Under Client secret, select Don't generate a client secret. 
- 
Under Authentication flows, select ALLOW_USER_SRP_AUTH and ALLOW_REFRESH_TOKEN_AUTH. 
- 
Under Hosted UI settings, set the Allowed callback URLs to your custom web app. 
- 
In Identity providers, select Cognito user pool. 
- 
In OAuth 2.0 grant types, select Authorization code grant. 
- 
In OpenID Connect scopes, select OpenID. 
- 
In Custom scopes, select https://cognitedata.com/IDENTITY and https://cognitedata.com/user_impersonation. 
- 
At the bottom of the window, select Create app client.