<p>I would like to find out if openiddict (<a href="https://github.com/openiddict/openiddict-core" rel="nofollow noreferrer">https://github.com/openiddict/openiddict-core</a>) and
Amazon Cognito.
I plan to use ABP OpenIddict Module (<a href="https://docs.abp.io/en/abp/6.0/Modules/OpenIddict" rel="nofollow noreferrer">https://docs.abp.io/en/abp/6.0/Modules/OpenIddict</a>
which provides advanced authentication features like single sign-on, single log-out, and API access control. This module persists applications, scopes, and other OpenIddict-related objects to the database.</p>
<p>In this video at the time mark: Amazon EKS SaaS deep dive: A multi-tenant EKS SaaS solution
<a href="https://youtu.be/tXVLjWjEEwo?t=1250" rel="nofollow noreferrer">https://youtu.be/tXVLjWjEEwo?t=1250</a>
You can see the onboarding experience when a SaaS tenant selects to provision its infrastructure and application using EKS Kubernetes.</p>
<p>Amazon Cognito creates User pool, App ID and Custom claims for the tenant.
Can OpenIddict have equivalent functionality?</p>
<p>I would like to rebuild AWS SaaS provisioning with DigitalOcean kubernetes and abp.io framework.</p>
<p>Thank you.</p>

Rad
<p>Short answer:
Yes, you could implement a similar solution.</p>
<p>Long anser:
Abp is an opinionated framework with a lot of best practices pre implemented for you. You need to understand how ABP does things in the first place to understand how to extend it. For selfservice onboarding you have to create your own registration process, which in turn would create a user and tenant.</p>
<p>Also openiddic is for all intents and purposes already implemented. Creating a selfservice onboarding would probably only touch the Account Module, the Tenant Management Module and the Identity Module</p>
<p>Read the doc on the abp site:</p>
<pre><code>[https://docs.abp.io/en/abp/latest/Modules/Account][1]
[https://docs.abp.io/en/abp/latest/Modules/Tenant-Management][2]
[https://docs.abp.io/en/abp/latest/Modules/Identity][3]
</code></pre>
