Cognito login timeout

If you're experiencing session timeout issues with Cognito when using an external login provider, there are a few settings you can check and adjust to modify the session duration and customize the user experience. Here are some steps you can take:

1. Adjusting Cognito User Pool settings:

   • Sign in to the AWS Management Console and navigate to the Amazon Cognito service.
   • Open your user pool and go to the "App integration" -> "App client settings" section.
   • Look for the "Refresh token expiration" setting. This determines how long the session can be extended by using a refresh token. You can increase this value to extend the session duration.
   • Save the changes to apply the updated settings.

2. Customizing the user experience:

   • Consider using Cognito's advanced security features, such as Adaptive Authentication or Lambda triggers, to customize the behavior and user experience during login flows. These features allow you to add additional logic and control over the authentication process.
   • You can create a custom authentication flow using AWS Lambda triggers to redirect users to specific pages within your application instead of Cognito's hosted UI. By customizing the authentication flow, you have more flexibility in handling timeouts and displaying appropriate error messages.

3. Handling errors gracefully:

   • When users are redirected back to Cognito's hosted UI with an error message, you can capture the error response and provide a more user-friendly error page within your application. This can be achieved by using callback URLs or redirect URIs that point to specific error pages.

It's important to note that session durations and login flows can be influenced by various factors, including the identity provider you're using and the specific implementation of your application.

Thanks for the response, we have tried the first two points but it hasn't had any impact on this scenario.

With regard to the third, could you elaborate? Is there some configuration that would allow us to intercept redirects to the hosted UI? I haven't been able to find it.