title: Using Login with Paypal and using OpenID with AWS Cognito
body: <p>I am trying to use the OpenID framework supported by Paypal to tie the credentials in with the AWS Cognito service.</p>
  
  <p>If I compare the configuration from Salesforce</p>
  
  <p><a href="https://login.salesforce.com/.well-known/openid-configuration" rel="nofollow">https://login.salesforce.com/.well-known/openid-configuration</a></p>
  
  <p>to the configuration at Paypal</p>
  
  <p><a href="https://www.paypal.com/.well-known/openid-configuration" rel="nofollow">https://www.paypal.com/.well-known/openid-configuration</a></p>
  
  <p>the Paypal configuration is missing the <strong>jwks_uri</strong> element which is a REQUIRED element of the OpenID Provider metadata per <a href="https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata" rel="nofollow">OIDC specification</a> and AWS uses the keys at that URI to verify the id tokens.</p>
  
  <p>Is there a different url I should be using for login with Paypal to work with OpenID?</p>
  
  <p>Is there any other way to get Login with Paypal to work with the AWS Cognito service with works well with other OpenID providers?</p>