Identity
A clean .NET surface over AWS Cognito — sign-up, sign-in, MFA, federation, hosted UI, and every Cognito capability, exposed as one typed API in your own AWS account.
Every AWS Cognito capability, in idiomatic .NET.
Cognito user pool
Sign-up, sign-in, and token flows against a pool provisioned in your own account.
Typed service
IUserIdentityService<TUser, TGroup> with request-object methods for users and groups.
Groups & permissions
A permission/group model enforced via [RequiresPermission] + the authorization server.
MFA
SMS, TOTP, and email second factors — Cognito-native.
Federation
Google, Apple, Microsoft, SAML, and OIDC providers via Cognito.
Provider versions
Cognito providers V1–V4; register the version your service targets.
Built in .NET.
Spoken in every language.
Every Identity module ships as both a NuGet package and an official Docker image — runs on ECS, EKS, Fargate, App Runner, or your laptop. Call its HTTP/gRPC API from Python, Go, Node, Java, Rust, or anything else that speaks the wire.
- ✓Multi-arch images:
amd64+arm64from the same tag - ✓OpenAPI + gRPC reflection enabled out of the box
- ✓Same configuration surface — env vars, Parameter Store, file
Kanject.Identity ships into your AWS, registers itself with one line in Program.cs, and exposes a typed API the rest of your service can use immediately.
Simplify your cloud
journey today.
Join forward-thinking developers and businesses who trust Kanject to eliminate cloud complexity and accelerate innovation.