title: Can I use a JWT from cognito (IdP is Salesforce with oidc) to query Salesforce API?
body: <p>So, after a lot of Googling and tests on my side, I cannot figure out if this is even possible (kind of a newbie here with oidc + cognito + salesforce).</p>
  <p>I have a need to authenticate my users via SSO with Salesforce as an identity provider. Then, I need to query for that specific user's information via Salesforce API. I want to avoid an extra oauth flow if possible since theoretically I have my users logged in already.</p>
  <p>The scenario is:</p>
  <ol>
  <li>I have configured Cognito with Salesforce as my identity provider via Open ID Connect.</li>
  <li>I managed to perform the auth flow correctly and I end with a code that I can exchange for an <code>id_token</code>, <code>access_token</code> and a <code>refresh_token</code> from cognito's <code>/oauth2/token</code> endpoint.</li>
  <li>Now the question is IF I can use the JWT tokens I got from cognito to query Salesforce API.</li>
  </ol>
  <p>I can elaborate and provide sample configuration if needed. Thanks a lot for any help on this :)</p>