I have a requirement to offer an Open ID Connect Identity Provider server. (That is, i have some users with their credentials checked against some data store under my control, and users are using those to access applications offered by others that i do NOT control).
I am trying to find the least efforts service for this, and I came across Cognito. It seems to check pretty much all of my boxes except for being able to add relying parties to it.
Is it possible to protect external services via OpenID Connect using AWS Cognito?