title: Can i use AWS cognito to provide a open id connect endpoint?
body: <p>I want to use AWS cognito as a OpenId connect provider.My AWS cognito IDP will intern call my another OpenId provider to authenticate the user. It will then create its new token and hand over to callers as its own.</p>
  
  <p>The OpenID provider used internally by AWS cognito pool is transparent to user. User only configures AWS cognito as its IDP provider.</p>
  
  <p>User case</p>
  
  <ul>
  <li>User authenticates with My AWS IDP provider</li>
  <li>My IDP provider authenticates the user agains Googles IDP provider</li>
  <li>My IDP decodes the token returned by Google IDP.</li>
  <li>My IDP Creates new token and add additional claims.</li>
  <li>My IDP hands over my JWT to user.</li>
  </ul>
  
  <p>Question</p>
  
  <ul>
  <li>Is this possible in AWS cognito?</li>
  <li>Does AWS user pool expose OpenID connect endpoint?</li>
  </ul>