> The Cognito apps remain obfuscated and we are trying to > get them in line with the rest of our integrations. Cost of proxying, I'm afraid. It's down to Amazon to populate the AuthnRequest in accordance with SAML proxying rules and they don't, not exactly a shock. -- Scott