PHPackages                             innocode-digital/inncognito - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. innocode-digital/inncognito

ActiveWordpress-muplugin[Authentication & Authorization](/categories/authentication)

innocode-digital/inncognito
===========================

Login and Registration with user's AWS Cognito account.

1.7.0(3y ago)05.3k↓100%12GPL-2.0+PHPPHP >=7.1

Since May 9Pushed 3y ago10 watchersCompare

[ Source](https://github.com/innocode-digital/inncognito)[ Packagist](https://packagist.org/packages/innocode-digital/inncognito)[ RSS](/packages/innocode-digital-inncognito/feed)WikiDiscussions main Synced 1mo ago

READMEChangelogDependencies (6)Versions (22)Used By (2)

Inncognito
==========

[](#inncognito)

### Description

[](#description)

Login and Registration with user's AWS Cognito account.

### Install

[](#install)

- Preferable way is to use [Composer](https://getcomposer.org/):

    ```
    composer require innocode-digital/wp-inncognito

    ```

    By default, it will be installed as [Must Use Plugin](https://codex.wordpress.org/Must_Use_Plugins). It's possible to control with `extra.installer-paths` in `composer.json`.
- Alternate way is to clone this repo to `wp-content/mu-plugins/` or `wp-content/plugins/`:

    ```
    cd wp-content/plugins/
    git clone git@github.com:innocode-digital/inncognito.git
    cd inncognito/
    composer install

    ```

If plugin was installed as regular plugin then activate **AWS Lambda Prerender** from Plugins page or [WP-CLI](https://make.wordpress.org/cli/handbook/): `wp plugin activate inncognito`.

### Configuration

[](#configuration)

Add the following constants to `wp-config.php`:

```
define( 'INNCOGNITO_DOMAIN', '' ); // Either domain or fully qualified URL (Cognito or custom).
define( 'INNCOGNITO_CLIENT_ID', '' );
define( 'INNCOGNITO_CLIENT_SECRET', '' );
define( 'INNCOGNITO_REGION', '' ); // e.g. eu-west-1
define( 'INNCOGNITO_USER_POOL_ID', '' );

```

### Usage

[](#usage)

Change callback URL:

```
define( 'INNCOGNITO_REDIRECT_URI', 'https://another-site.com/login/' );

```

Use case could be when e.g. you do not want to be limited with callback URL requirement (it's required to set all callbacks in Cognito settings) but want to use one with custom redirects handling.

---

Change login URL to custom endpoint:

```
define( 'INNCOGNITO_ENDPOINT', 'cognito' ); // default: 'inncognito'

```

---

Change session cookie name:

```
define( 'INNCOGNITO_COOKIE', 'cognito' ); // default: 'inncognito'

```

Session is used to handle actions and redirects, prevent CSRF attacks.

---

Force users to log in with their AWS Cognito account:

```
define( 'INNCOGNITO_FORCE_COGNITO', true );

```

Works for users who were logged in with SSO at least once.

---

Disable registration through AWS Cognito during SSO:

```
define( 'INNCOGNITO_DISALLOW_REGISTRATION', true );

```

###  Health Score

29

—

LowBetter than 60% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity21

Limited adoption so far

Community13

Small or concentrated contributor base

Maturity52

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~16 days

Recently: every ~23 days

Total

16

Last Release

1221d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/5b52f801a1cdb5f6622a9e49f4359717b1808ca23e948a243eae225f55e2c7eb?d=identicon)[smfb-dinamo](/maintainers/smfb-dinamo)

---

Top Contributors

[![kuliebiakin](https://avatars.githubusercontent.com/u/6066592?v=4)](https://github.com/kuliebiakin "kuliebiakin (27 commits)")

---

Tags

awsaws-cognitocognitowordpresswordpress-pluginpluginwordpressawsoauth2loginwpCognitoregistrationmu-plugin

###  Code Quality

Code StylePHP\_CodeSniffer

### Embed Badge

![Health badge](/badges/innocode-digital-inncognito/health.svg)

```
[![Health](https://phpackages.com/badges/innocode-digital-inncognito/health.svg)](https://phpackages.com/packages/innocode-digital-inncognito)
```

###  Alternatives

[ellaisys/aws-cognito

AWS Cognito package that allows Auth and other related features using the AWS SDK for PHP

120220.7k1](/packages/ellaisys-aws-cognito)[thenetworg/oauth2-azure

Azure Active Directory OAuth 2.0 Client Provider for The PHP League OAuth2-Client

2509.6M47](/packages/thenetworg-oauth2-azure)[pmill/aws-cognito

A PHP client for AWS Cognito user pools

74266.0k3](/packages/pmill-aws-cognito)[sandstorm/usermanagement

Neos and Flow package for user management, login/logout, password reset and user activation

3828.4k](/packages/sandstorm-usermanagement)[internacionalweb/cognito-token-verifier

This library verifies that the signature of the JWT is valid, comes from a desired application, and that the token has not been tampered with or expired.

102.1k](/packages/internacionalweb-cognito-token-verifier)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)