← All BaaS products
Authentication

Identity

Kanject.Identity

A clean .NET surface over AWS Cognito — sign-up, password and one-time-code sign-in, Apple and Google sign-in, password resets and groups, exposed as one typed API in your own AWS account.

USER POOL · 247 users
SUBEMAILROLESTATUS
usr_8f3aada@kanjectbusiness.solutionsadminactive
usr_2c91tom@kanjectbusiness.solutionsmemberactive
usr_b074sara@kanjectbusiness.solutionsmemberinvited
New user
SIGN IN · ONE-TIME CODE
Six-digit code sent to
mia@kanjectbusiness.solutions
Enter the code
RS256 · ISSUED · Cognito User Pool
eyJhbGciOi...eyJzdWIiOi...[signature]
{
"sub":"usr_91kf",
"email":"mia@kanjectbusiness.solutions",
"cognito:groups":[ "admin" ],
"iat":1714738200,
"exp":1715343000
}
YOUR SERVICE · LIVE
Permission checks
last 1m
6
CAPABILITIES
YOUR ACCOUNT
NATIVE C#
LAMBDA OR CONTAINER

Your Cognito user pool, in idiomatic .NET.

01

Your Cognito user pool

Register users and sign them in with SRP against the pool you already run in your own account. The SDK never creates or changes it.

RegisterUserAsync()
02

One typed service

IUserIdentityService takes your own user and group types: register, sign in, create and update groups, and add users to them.

IUserIdentityService
03

Groups & permissions

Guard an action with [RequiresPermission] and the caller’s groups are checked against permissions in DynamoDB. A missing [Module] fails the build.

[RequiresPermission]
04

One-time codes

Passwordless sign-in with a single-use, six-digit code that can expire. The SDK issues the code; you deliver it by SMS or email.

SignInOption.OneTimePassword
05

Apple & Google sign-in

The provider’s token is checked against its signing keys, then linked to an existing user by email or provisioned as a new one.

IdentityProvider.Apple
06

Account controls

Disable or re-enable an account, sign a user out everywhere, and reset or change a password as an admin.

DisableUserAccountAsync()
Lambda or container

Inside your service.
On Lambda or in any container.

Identity is a .NET library, not a service you call. Add the package, register it in Program.cs, and it runs inside your own service, in process. Ship that service as a Lambda function or as your own container on ECS, EKS or App Runner — the module goes wherever your code goes.

  • ✓ In process: your code calls the module directly — no sidecar, no extra network hop
  • ✓ Built from your code: your image or Lambda package, patched on your schedule
  • ✓ Configured in Program.cs, with values from your own settings
One NuGet install. Zero glue code.

Kanject.Identity ships into your AWS, registers itself with one line in Program.cs, and exposes a typed API the rest of your service can use immediately.

Read the deployment guide →
Ready to ship?

Simplify your cloud
journey today.

Join forward-thinking developers and businesses who trust Kanject to eliminate cloud complexity and accelerate innovation.