Your app uses AWS Cognito Identity for authentication and stores user profiles in a User Pool. To expand the availability and ease of signing in to the app, your team is requesting advice on allowing the use of OpenID Connect (OIDC) identity providers as additional means of authenticating users and saving the user profile information. What is your recommendation on OIDC identity providers?

Answer options:

A.This is supported, along with social and SAML based identity providers.
B.This is not supported, only social identity providers can be integrated into User Pools
C.If you want OIDC identity providers, then you must include SAML and social-based support as well
D.It’s too much effort to add non-Cognito authenticated user information to a User Pool

Correct Answer - A
Option A is correct. OpenID Connect (OIDC) identity providers (IdPs) (like Salesforce or Ping Identity) are supported in Cognito, along with social and SAML based identity providers. You can add an OIDC IdP to your user pool in the AWS Management Console, with the AWS CLI, or with the user pool API method CreateIdentityProvider.
Option B is incorrect. Cognito supports more than just social identity providers, including OIDC, SAML, and its own identity pools.
Option C is incorrect. You can add any combination of federated types. You don’t have to add them all.
Option D is incorrect. While there is additional coding to develop this, the effort is most likely not too great to add the feature.
References:
https://aws.amazon.com/cognito/
https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-oidc-idp.html
http://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-integrate-with-cognito.html
https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html
https://aws.amazon.com/cognito/getting-started/
https://docs.aws.amazon.com/cognito/latest/developerguide/concepts.html