Federated Access

Sign in on the access domain.

This page stays on your app domain, validates credentials against Cognito server-side, and then issues the app-owned session cookie used by sibling apps and protected APIs.

What Happens Next

Credentials are checked against Cognito from the backend.
On success, the app issues its own bound session cookie and redirects you back to the requested page.
Admin access is still driven by your stored tags and guaranteed admin email list.