title: AWS Cognito custom auth flow with USER_PASSWORD_AUTH
body: <p>I'm currently working on a custom authentication flow, using the define, create and verify triggers. However, the users password isn't checked during the flow. We use the USER_PASSWORD_AUTH option on our clients, so no SRP.</p>
  
  <p>I saw this question <a href="https://stackoverflow.com/questions/48999092/aws-cognito-can-i-use-the-migration-trigger-in-a-custom-auth-flow">Can I use the migration trigger in a Custom auth flow</a> and didn't quite make out if it answered my question: </p>
  
  <p>Is it possible to use custom auth flow in combination with username-password (non-SRP) flow? And if so, what is the challenge name that I have to return?</p>
  
  <p><a href="https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-authentication-flow.html#amazon-cognito-user-pools-admin-authentication-flow" rel="nofollow noreferrer">Here</a> is stated that combinations can be used, but it seems to me that the PASSWORD_VERIFIER only works with the SRP auth:</p>
  
  <blockquote>
    <p>A custom authentication flow can also use a combination of built-in challenges such as SRP password verification and MFA via SMS, and custom challenges such as CAPTCHA or secret questions.</p>
  </blockquote>