diff --git a/docs/v3.x/plugins/users-permissions.md b/docs/v3.x/plugins/users-permissions.md
index 31ee2b7b0c..a27427b9ba 100644
--- a/docs/v3.x/plugins/users-permissions.md
+++ b/docs/v3.x/plugins/users-permissions.md
@@ -317,6 +317,42 @@ Wait a few seconds while the application is created.
 
 :::
 
+::: tab AWS Cognito
+
+#### Using ngrok
+
+AWS Cognito accepts the `localhost` urls. <br>
+The use of `ngrok` is not needed.
+
+#### AWS Cognito configuration
+
+- Visit the AWS Management Console <br> [https://aws.amazon.com/console/](https://aws.amazon.com/console/)
+- If needed, select your **Region** in the top right corner next to the Support dropdown
+- Select the **Services** dropdown in the top left corner
+- Click on **Cognito** in the `Security, Identity & Compliance` section
+- Then click on the **Manage User Pools** button
+- If applicable either create or use an existing user pool. You will find hereafter a tutorial to create a User Pool <br> [https://docs.aws.amazon.com/cognito/latest/developerguide/tutorial-create-user-pool.html](https://docs.aws.amazon.com/cognito/latest/developerguide/tutorial-create-user-pool.html)
+- Go to the **App clients** section in your cognito user pool and create a new client with the name `Strapi Auth` and set all the parameters and then click on **Create app client**
+- You should now have an **App client id** and by clicking on the button **Show Details** you will be able to see the **App client secret**. Do copy those two values **App client id** and **App client secret** somewhere for later use when configuring the AWS Cognito provider in Strapi.
+- Go to the **App integration section** and click on **App client settings**
+- Look for your app client named `Strapi Auth` and enable Cognito User Pool by checking it in the **Enabled Identity Providers** section of your newly created App client
+- Fill in your callback URL and Sign out URL with the value `http://localhost:1337/connect/cognito/callback` or the one provided by your AWS Cognito provider in Strapi
+- In the **Oauth 2.0** section select `Authorization code grant` and `Implicit grant` for the **Allowed OAuth Flows** and select `email`, `openid` and `profile` for the **Allowed OAuth Scopes**
+- You can now click on **Save changes** and if you have already configured your domain name then you should be able to see a link to the **Launch Hosted UI**. You can click on it in order to display the AWS Cognito login page. In case you haven't yet configured your domain name, use the link **Choose domain name** at the bottom right of the page in order to configure your domain name. On that page you will have an `Amazon Cognito Domain` section where a `Domain prefix` is already setup. Type a domain prefix to use for the sign-up and sign-in pages that are hosted by Amazon Cognito, this domain prefix together with the `.auth.YOUR_REGION.amazoncognito.com` will be the **Host URI (Subdomain)** value for your strapi configuration later on.
+
+#### Strapi configuration
+
+- Visit the User Permissions provider settings page <br> [http://localhost:1337/admin/settings/users-permissions/providers](http://localhost:1337/admin/settings/users-permissions/providers)
+- Click on the **Cognito** provider
+- Fill the information (replace with your own client ID and secret):
+  - **Enable**: `ON`
+  - **Client ID**: fill in the **App client id** (`5bd7a786qdupjmi0b3s10vegdt`)
+  - **Client Secret**: fill in the **App client secret** (`19c5c78dsfsdfssfsdfhpdb4nkpb145vesdfdsfsffgh7vwd6g45jlipbpb`)
+  - **Host URI (Subdomain)**: fill in the URL value that you copied earlier (`myapp67b50345-67b50b17-local.auth.eu-central-1.amazoncognito.com`)
+  - **The redirect URL to your front-end app**: if you are using strapi react-login [https://github.com/strapi/strapi-examples/tree/master/login-react/](https://github.com/strapi/strapi-examples/tree/master/login-react/) use `http://localhost:3000/connect/cognito/redirect` but if you do not yet have a front-end app to test your Cognito configuration you can then use the following URL `http://localhost:1337/auth/cognito/callback`
+
+:::
+
 ::: tab Twitter
 
 #### Using ngrok
diff --git a/packages/strapi-plugin-users-permissions/admin/src/containers/Providers/index.js b/packages/strapi-plugin-users-permissions/admin/src/containers/Providers/index.js
index f3a7fc7ea6..fb2cc81f51 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/containers/Providers/index.js
+++ b/packages/strapi-plugin-users-permissions/admin/src/containers/Providers/index.js
@@ -10,7 +10,7 @@ import {
   getYupInnerErrors,
   request,
 } from 'strapi-helper-plugin';
-import { get, upperFirst } from 'lodash';
+import { get, upperFirst, has } from 'lodash';
 import { Row } from 'reactstrap';
 import pluginPermissions from '../../permissions';
 import { useForm } from '../../hooks';
@@ -52,6 +52,15 @@ const ProvidersPage = () => {
     () => providers.filter(provider => provider.enabled).length,
     [providers]
   );
+  const isProviderWithSubdomain = useMemo(() => {
+    if (!providerToEditName) {
+      return false;
+    }
+
+    const providerToEdit = providers.find(obj => obj.name === providerToEditName);
+
+    return has(providerToEdit, 'subdomain');
+  }, [providers, providerToEditName]);
   const disabledProvidersCount = useMemo(() => {
     return providers.length - enabledProvidersCount;
   }, [providers, enabledProvidersCount]);
@@ -80,8 +89,16 @@ const ProvidersPage = () => {
   const pageTitle = formatMessage({ id: getTrad('HeaderNav.link.providers') });
 
   const formToRender = useMemo(() => {
-    return providerToEditName === 'email' ? forms.email : forms.providers;
-  }, [providerToEditName]);
+    if (providerToEditName === 'email') {
+      return forms.email;
+    }
+
+    if (isProviderWithSubdomain) {
+      return forms.providersWithSubdomain;
+    }
+
+    return forms.providers;
+  }, [providerToEditName, isProviderWithSubdomain]);
 
   const handleClick = useCallback(() => {
     buttonSubmitRef.current.click();
@@ -159,7 +176,7 @@ const ProvidersPage = () => {
       formToRender,
       handleToggle,
       modifiedData,
-      providerToEditName,
+      providerToEditName
     ]
   );
 
@@ -218,13 +235,13 @@ const ProvidersPage = () => {
             <Row>
               {formToRender.form.map(input => {
                 const label = input.label.params
-                  ? { ...input.label, params: { provider: upperFirst(providerToEditName) } }
-                  : input.label;
+                    ? { ...input.label, params: { provider: upperFirst(providerToEditName) } }
+                    : input.label;
 
                 const value =
-                  input.name === 'noName'
-                    ? `${strapi.backendURL}/connect/${providerToEditName}/callback`
-                    : get(modifiedData, [providerToEditName, ...input.name.split('.')], '');
+                    input.name === 'noName'
+                      ? `${strapi.backendURL}/connect/${providerToEditName}/callback`
+                      : get(modifiedData, [providerToEditName, ...input.name.split('.')], '');
 
                 return (
                   <SizedInput
diff --git a/packages/strapi-plugin-users-permissions/admin/src/containers/Providers/utils/createProvidersArray.js b/packages/strapi-plugin-users-permissions/admin/src/containers/Providers/utils/createProvidersArray.js
index 4d210ab3b3..ea359ffbfe 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/containers/Providers/utils/createProvidersArray.js
+++ b/packages/strapi-plugin-users-permissions/admin/src/containers/Providers/utils/createProvidersArray.js
@@ -3,10 +3,14 @@ import { sortBy } from 'lodash';
 const createProvidersArray = data => {
   return sortBy(
     Object.keys(data).reduce((acc, current) => {
-      const { icon: iconName, enabled } = data[current];
+      const { icon: iconName, enabled, subdomain } = data[current];
       const icon = iconName === 'envelope' ? ['fas', 'envelope'] : ['fab', iconName];
 
-      acc.push({ name: current, icon, enabled });
+      if (subdomain) {
+        acc.push({ name: current, icon, enabled, subdomain });
+      } else {
+        acc.push({ name: current, icon, enabled });
+      }
 
       return acc;
     }, []),
diff --git a/packages/strapi-plugin-users-permissions/admin/src/containers/Providers/utils/forms.js b/packages/strapi-plugin-users-permissions/admin/src/containers/Providers/utils/forms.js
index 0fd3098b2a..810affa957 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/containers/Providers/utils/forms.js
+++ b/packages/strapi-plugin-users-permissions/admin/src/containers/Providers/utils/forms.js
@@ -103,6 +103,103 @@ const forms = {
       }),
     }),
   },
+  providersWithSubdomain: {
+    form: [
+      {
+        autoFocus: true,
+        label: getTrad('PopUpForm.Providers.enabled.label'),
+        name: 'enabled',
+        type: 'bool',
+        description: getTrad('PopUpForm.Providers.enabled.description'),
+        size: { xs: 6 },
+        validations: {
+          required: true,
+        },
+      },
+      {
+        autoFocus: false,
+        label: getTrad('PopUpForm.Providers.key.label'),
+        name: 'key',
+        type: 'text',
+        placeholder: getTrad('PopUpForm.Providers.key.placeholder'),
+        size: { xs: 12 },
+        validations: {
+          required: true,
+        },
+      },
+      {
+        autoFocus: false,
+        label: getTrad('PopUpForm.Providers.secret.label'),
+        name: 'secret',
+        type: 'text',
+        placeholder: getTrad('PopUpForm.Providers.secret.placeholder'),
+        size: { xs: 12 },
+        validations: {
+          required: true,
+        },
+      },
+      {
+        autoFocus: false,
+        label: getTrad('PopUpForm.Providers.subdomain.label'),
+        name: 'subdomain',
+        type: 'text',
+        placeholder: getTrad('PopUpForm.Providers.subdomain.placeholder'),
+        size: { xs: 12 },
+        validations: {
+          required: true,
+        },
+      },
+      {
+        autoFocus: false,
+        label: getTrad('PopUpForm.Providers.redirectURL.front-end.label'),
+        placeholder: 'http://www.client-app.com',
+        name: 'callback',
+        type: 'text',
+        size: { xs: 12 },
+        validations: {
+          required: true,
+        },
+      },
+      {
+        label: {
+          id: getTrad('PopUpForm.Providers.redirectURL.label'),
+          params: {
+            provider: 'VK',
+          },
+        },
+        name: 'noName',
+        type: 'text',
+        validations: {},
+        size: {
+          xs: 12,
+        },
+        disabled: true,
+      },
+    ],
+    schema: yup.object().shape({
+      enabled: yup.bool().required(translatedErrors.required),
+      key: yup.string().when('enabled', {
+        is: true,
+        then: yup.string().required(translatedErrors.required),
+        otherwise: yup.string(),
+      }),
+      secret: yup.string().when('enabled', {
+        is: true,
+        then: yup.string().required(translatedErrors.required),
+        otherwise: yup.string(),
+      }),
+      subdomain: yup.string().when('enabled', {
+        is: true,
+        then: yup.string().required(translatedErrors.required),
+        otherwise: yup.string(),
+      }),
+      callback: yup.string().when('enabled', {
+        is: true,
+        then: yup.string().required(translatedErrors.required),
+        otherwise: yup.string(),
+      }),
+    }),
+  },
 };
 
 export default forms;
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/ar.json b/packages/strapi-plugin-users-permissions/admin/src/translations/ar.json
index be1adc42d4..3b628ed3a8 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/ar.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/ar.json
@@ -40,6 +40,8 @@
   "PopUpForm.Providers.secret.label": "سر العميل (Client Secret)",
   "PopUpForm.Providers.secret.placeholder": "نص",
   "PopUpForm.header.edit.email-templates": "تحرير قوالب البريد الإلكتروني",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "تم تحديث الإعدادات",
   "plugin.description.long": "حماية الـAPI الخاص بك مع عملية مصادقة كاملة استناداً إلى JWT. يأتي هذا الملحق أيضًا مع إستراتيجية ACL التي تسمح لك بإدارة الأذونات بين مجموعات المستخدمين.",
   "plugin.description.short": "حماية الـAPI الخاص بك مع عملية مصادقة كاملة استناداً إلى JWT",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/cs.json b/packages/strapi-plugin-users-permissions/admin/src/translations/cs.json
index 448bd514d6..1e3a99fb3a 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/cs.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/cs.json
@@ -46,6 +46,8 @@
   "PopUpForm.Providers.secret.label": "Client Secret",
   "PopUpForm.Providers.secret.placeholder": "TEXT",
   "PopUpForm.header.edit.email-templates": "Upravit e-mailové šablony",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "Nastavení bylo aktualizování",
   "plugin.description.long": "Chraňte své API pomocí kompletního autentifikačního procesu, založeného na JWT. Tento zásuvný modul obsahuje ACL strategii, která vám umožní spravovat oprávnění mezi skupinami uživatelů.",
   "plugin.description.short": "Chraňte své API pomocí kompletního autentifikačního procesu, založeného na JWT",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/de.json b/packages/strapi-plugin-users-permissions/admin/src/translations/de.json
index fa0f60037e..e91c30bf0d 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/de.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/de.json
@@ -44,6 +44,8 @@
   "PopUpForm.Providers.secret.label": "Client Secret",
   "PopUpForm.Providers.secret.placeholder": "TEXT",
   "PopUpForm.header.edit.email-templates": "E-Mail-Templates bearbeiten",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "Einstellungen aktualisiert",
   "plugin.description.long": "Beschütze deine API mit einem vollständigen Authentifikationsprozess basierend auf JWT. Zudem bietet dieses Plugin eine ACL-Strategie, die erlaubt, die Befugnisse zwischen Benutzergruppen festzulegen.",
   "plugin.description.short": "Beschütze deine API mit einem vollständigen Authentifikationsprozess basierend auf JWT.",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/en.json b/packages/strapi-plugin-users-permissions/admin/src/translations/en.json
index 770616da82..97799d6347 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/en.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/en.json
@@ -52,6 +52,8 @@
   "PopUpForm.Providers.secret.placeholder": "TEXT",
   "PopUpForm.header.edit.email-templates": "Edit Email Templates",
   "PopUpForm.header.edit.providers": "Edit Provider",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "Settings.roles.deleted": "Role deleted",
   "Settings.roles.edited": "Role edited",
   "Settings.section-label": "Users & Permissions plugin",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/es.json b/packages/strapi-plugin-users-permissions/admin/src/translations/es.json
index 22f858a09d..1650b00620 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/es.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/es.json
@@ -44,6 +44,8 @@
   "PopUpForm.Providers.secret.label": "Secreto Cliente",
   "PopUpForm.Providers.secret.placeholder": "TEXTO",
   "PopUpForm.header.edit.email-templates": "Editar Plantillas de Email",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "Los ajustes se han actualizado",
   "plugin.description.long": "Proteja su API con un proceso de autenticación completo basado en JWT. Este plugin viene también con una estrategia ACL que le permite administrar los permisos entre los grupos de usuarios.",
   "plugin.description.short": "Proteja su API con un proceso de autenticación completo basado en JWT",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/fr.json b/packages/strapi-plugin-users-permissions/admin/src/translations/fr.json
index 8587be9d9d..81071f2365 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/fr.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/fr.json
@@ -46,6 +46,8 @@
   "PopUpForm.Providers.secret.label": "Client Secret",
   "PopUpForm.Providers.secret.placeholder": "TEXT",
   "PopUpForm.header.edit.email-templates": "Editer E-mail Templates",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "Les configurations ont bien été sauvegardés",
   "plugin.description.long": "Protégez votre API avec un système d'authentification complet basé sur JWT (JSON Web Token). Ce plugin ajoute aussi une stratégie ACL (Access Control Layer) qui vous permet de gérer les permissions entre les groupes d'utilisateurs.",
   "plugin.description.short": "Protégez votre API avec un système d'authentification complet basé sur JWT",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/it.json b/packages/strapi-plugin-users-permissions/admin/src/translations/it.json
index a6afc6086b..4a743153d1 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/it.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/it.json
@@ -38,6 +38,8 @@
   "PopUpForm.Providers.secret.label": "Client Secret",
   "PopUpForm.Providers.secret.placeholder": "TEXT",
   "PopUpForm.header.edit.email-templates": "Modifica il template delle Email",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "Impostazioni aggiornate",
   "plugin.description.long": "Proteggi le tue API con un processo completo di autenticazione basato su JWT. Questo plugin è implementato con una strategia ACL che ti consente di gestire i permessi tra i gruppi di utenti.",
   "plugin.description.short": "Proteggi le tue API con un processo completo di autenticazione basato su JWT",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/ja.json b/packages/strapi-plugin-users-permissions/admin/src/translations/ja.json
index d590a6b691..ac3d14c7eb 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/ja.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/ja.json
@@ -44,6 +44,8 @@
   "PopUpForm.Providers.secret.label": "クライアントの秘密",
   "PopUpForm.Providers.secret.placeholder": "TEXT",
   "PopUpForm.header.edit.email-templates": "メールテンプレートの編集",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "設定が更新されました",
   "plugin.description.long": "JWTに基づいた完全な認証プロセスでAPIを保護します。このプラグインには、ユーザーのグループ間で権限を管理できるACL戦略もあります。",
   "plugin.description.short": "JWTに基づく完全な認証プロセスでAPIを保護する",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/ko.json b/packages/strapi-plugin-users-permissions/admin/src/translations/ko.json
index 0ff31a88c5..102774dc42 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/ko.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/ko.json
@@ -46,6 +46,8 @@
   "PopUpForm.Providers.secret.label": "클라이언트 시크릿(Client Secret)",
   "PopUpForm.Providers.secret.placeholder": "텍스트",
   "PopUpForm.header.edit.email-templates": "이메일 템플릿 수정",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "설정을 업데이트했습니다.",
   "plugin.description.long": "JWT 기반의 인증 프로세스로 API를 보호하세요. 이 플러그인에서 사용자 그룹간 권한을 관리할 수 있는 ACL 전략도 설정할 수 있습니다.",
   "plugin.description.short": "JWT 기반의 인증 프로세스로 API를 보호하세요.",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/ms.json b/packages/strapi-plugin-users-permissions/admin/src/translations/ms.json
index 5063aef548..4671f8133e 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/ms.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/ms.json
@@ -46,6 +46,8 @@
   "PopUpForm.Providers.secret.label": "Client Secret",
   "PopUpForm.Providers.secret.placeholder": "TEKS",
   "PopUpForm.header.edit.email-templates": "Edit Templat E-mel",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "Tetapan telah dikemas kini",
   "plugin.description.long": "Lindungi API anda dengan proses pengesahan penuh berdasarkan JWT. Plugin ini juga dilengkapi dengan strategi ACL yang membolehkan anda mengurus pengizinan antara kumpulan pengguna.",
   "plugin.description.short": "Lindungi API anda dengan proses pengesahan penuh berdasarkan JWT"
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/nl.json b/packages/strapi-plugin-users-permissions/admin/src/translations/nl.json
index 7b5908f2da..561cb54895 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/nl.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/nl.json
@@ -44,6 +44,8 @@
   "PopUpForm.Providers.secret.label": "Client Secret",
   "PopUpForm.Providers.secret.placeholder": "TEXT",
   "PopUpForm.header.edit.email-templates": "E-mail sjablonen aanpassen",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "Instellingen zijn geüpdatet",
   "plugin.description.long": "Beveilig je API met een volledig authenticatie proces op JWT. Deze extensie komt ook met een ACL strategie welke ervoor zorgt dat je de permissies tussen groepen van gebruikers kan beheren.",
   "plugin.description.short": "Beveilig je API met een volledig authenticatie proces op JWT",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/pl.json b/packages/strapi-plugin-users-permissions/admin/src/translations/pl.json
index f0b9955924..7c69d2dd68 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/pl.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/pl.json
@@ -46,6 +46,8 @@
   "PopUpForm.Providers.secret.label": "Klucz sekretny klienta",
   "PopUpForm.Providers.secret.placeholder": "TEKST",
   "PopUpForm.header.edit.email-templates": "Zmień szablony e-mail",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "Ustawienia zostały zaktualizowane",
   "plugin.description.long": "Chroń API za pomocą procesu pełnego uwierzytelniania opartego na JWT. Ta wtyczka zawiera również strategię ACL, która pozwala zarządzać uprawnieniami między grupami użytkowników.",
   "plugin.description.short": "Chroń API za pomocą procesu pełnego uwierzytelniania opartego na JWT",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/pt-BR.json b/packages/strapi-plugin-users-permissions/admin/src/translations/pt-BR.json
index c24a24407d..044806e909 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/pt-BR.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/pt-BR.json
@@ -40,6 +40,8 @@
   "PopUpForm.Providers.secret.label": "Segredo do Cliente",
   "PopUpForm.Providers.secret.placeholder": "TEXT",
   "PopUpForm.header.edit.email-templates": "Editar modelos de email",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "As configurações foram atualizadas",
   "plugin.description.long": "Proteja sua API com um processo de autenticação completo baseado no JWT. Esse plugin também vem com uma estratégia de ACL que permite gerenciar as permissões entre os grupos de usuários.",
   "plugin.description.short": "Proteja sua API com um processo de autenticação completo baseado no JWT",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/pt.json b/packages/strapi-plugin-users-permissions/admin/src/translations/pt.json
index 4e68e86467..5aec7af97c 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/pt.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/pt.json
@@ -44,6 +44,8 @@
   "PopUpForm.Providers.secret.label": "Segredo de cliente",
   "PopUpForm.Providers.secret.placeholder": "TEXTO",
   "PopUpForm.header.edit.email-templates": "Editar Modelos de Email",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "As configurações foram atualizadas",
   "plugin.description.long": "Proteja a sua API com um processo completo de autenticação baseado em JWT. Este plugin também vem com estratégia de ACL que permite gerir permissões entre grupos de utilizadores.",
   "plugin.description.short": "Proteja a sua API com um processo completo de autenticação baseado em JWT",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/ru.json b/packages/strapi-plugin-users-permissions/admin/src/translations/ru.json
index fddc6abee7..04c4e8a659 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/ru.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/ru.json
@@ -44,6 +44,8 @@
   "PopUpForm.Providers.secret.label": "Client Secret",
   "PopUpForm.Providers.secret.placeholder": "TEXT",
   "PopUpForm.header.edit.email-templates": "Редактировать шаблон письма",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "Настройки обновлены",
   "plugin.description.long": "Защитите ваш API с помощью процесса полной аутентификации, основанном на JWT. Этот плагин также включает в себя возможности ACL (Access Control List), которые позволят вам настраивать доступы для групп пользователей.",
   "plugin.description.short": "Защитите ваш API с помощью процесса полной аутентификации, основанном на JWT",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/sk.json b/packages/strapi-plugin-users-permissions/admin/src/translations/sk.json
index 611c2faa77..be580081ae 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/sk.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/sk.json
@@ -48,6 +48,8 @@
   "PopUpForm.Providers.secret.label": "Client Secret",
   "PopUpForm.Providers.secret.placeholder": "TEXT",
   "PopUpForm.header.edit.email-templates": "Upraviť šablóny e-mailov",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "Nastavenia boli uložené",
   "plugin.description.long": "Zabezpečte vaše API pomocou JWT tokenov. Tento plugin taktiež podporuje ACL záznamy, ktoré umožňujú spravovať oprávnenia v rámci skupín používateľov.",
   "plugin.description.short": "Zabezpečte vaše API pomocou JWT tokenov",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/tr.json b/packages/strapi-plugin-users-permissions/admin/src/translations/tr.json
index 0faef5cd53..06ad8cc270 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/tr.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/tr.json
@@ -44,6 +44,8 @@
   "PopUpForm.Providers.secret.label": "Web istemcisi Secret",
   "PopUpForm.Providers.secret.placeholder": "METİN",
   "PopUpForm.header.edit.email-templates": "E-posta Şablonlarını Düzenle",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "Ayarlar güncellendi",
   "plugin.description.long": "Servisinizi JWT'ye dayalı tam bir kimlik doğrulama işlemi ile koruyun. Bu eklenti, kullanıcı grupları arasındaki izinleri yönetmenize izin veren bir ACL stratejisiyle de gelir.",
   "plugin.description.short": "Servisinizi JWT'ye dayalı tam bir kimlik doğrulama işlemi ile koruyun",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/uk.json b/packages/strapi-plugin-users-permissions/admin/src/translations/uk.json
index 96dfef58e6..1035419388 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/uk.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/uk.json
@@ -46,6 +46,8 @@
   "PopUpForm.Providers.secret.label": "Client Secret",
   "PopUpForm.Providers.secret.placeholder": "TEXT",
   "PopUpForm.header.edit.email-templates": "Редагування шаблони листів",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "Налаштування оновлено",
   "plugin.description.long": "Захистіть API за допомогою процесу аутентифікації на основі JWT. Цей плагін також включає можливості ACL, які дозволяють керувати дозволами між групами користувачів.",
   "plugin.description.short": "Захистіть API за допомогою процесу аутентифікації на основі JWT"
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/vi.json b/packages/strapi-plugin-users-permissions/admin/src/translations/vi.json
index 4f8ccd0578..ba6101845a 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/vi.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/vi.json
@@ -46,6 +46,8 @@
   "PopUpForm.Providers.secret.label": "Client Secret",
   "PopUpForm.Providers.secret.placeholder": "VĂN BẢN",
   "PopUpForm.header.edit.email-templates": "Sửa Các Mẫu Email",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "Các cấu hình đã được cập nhật",
   "plugin.description.long": "Bảo vệ API của bạn với quá trình chứng thực đầy đủ dựa trên JWT. Plugin này cũng kèm với chiến lược ACL cho phép bạn quản lý quyền giữa các nhóm người dùng.",
   "plugin.description.short": "Bảo vệ API của bạn với quá trình chứng thực đầy đủ dựa trên JWT",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/zh-Hans.json b/packages/strapi-plugin-users-permissions/admin/src/translations/zh-Hans.json
index 83be451d67..3dda11eb1c 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/zh-Hans.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/zh-Hans.json
@@ -46,6 +46,8 @@
   "PopUpForm.Providers.secret.label": "Client Secret",
   "PopUpForm.Providers.secret.placeholder": "文本",
   "PopUpForm.header.edit.email-templates": "编辑电子邮件模版",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "设置已被更新",
   "plugin.description.long": "使用基于 JWT 的完整身份验证过程来保护 API。这个插件还有一个 ACL 策略，允许你管理用户组之间的权限。",
   "plugin.description.short": "使用基于 JWT 的完整身份验证过程保护 API",
diff --git a/packages/strapi-plugin-users-permissions/admin/src/translations/zh.json b/packages/strapi-plugin-users-permissions/admin/src/translations/zh.json
index 8da0dda45f..a1c7d0346b 100644
--- a/packages/strapi-plugin-users-permissions/admin/src/translations/zh.json
+++ b/packages/strapi-plugin-users-permissions/admin/src/translations/zh.json
@@ -44,6 +44,8 @@
   "PopUpForm.Providers.secret.label": "客戶端密鑰",
   "PopUpForm.Providers.secret.placeholder": "TEXT",
   "PopUpForm.header.edit.email-templates": "編輯郵件範本",
+  "PopUpForm.Providers.subdomain.label": "Host URI (Subdomain)",
+  "PopUpForm.Providers.subdomain.placeholder": "my.subdomain.com",
   "notification.success.submit": "設定已更新",
   "plugin.description.long": "使用 JWT 認證保護您的 API。這個擴充功能也使用 ACL 來讓你管理不同群組使用者的權限。",
   "plugin.description.short": "使用 JWT 認證保護您的 API",
diff --git a/packages/strapi-plugin-users-permissions/config/functions/bootstrap.js b/packages/strapi-plugin-users-permissions/config/functions/bootstrap.js
index 41dedb3aa8..8634ae1291 100644
--- a/packages/strapi-plugin-users-permissions/config/functions/bootstrap.js
+++ b/packages/strapi-plugin-users-permissions/config/functions/bootstrap.js
@@ -102,6 +102,15 @@ module.exports = async () => {
       callback: `${strapi.config.server.url}/auth/linkedin/callback`,
       scope: ['r_liteprofile', 'r_emailaddress'],
     },
+    cognito: {
+      enabled: false,
+      icon: 'aws',
+      key: '',
+      secret: '',
+      subdomain: 'my.subdomain.com',
+      callback: `${strapi.config.server.url}/auth/cognito/callback`,
+      scope: ['email', 'openid', 'profile'],
+    },
   };
   const prevGrantConfig = (await pluginStore.get({ key: 'grant' })) || {};
   // store grant auth config to db
diff --git a/packages/strapi-plugin-users-permissions/services/Providers.js b/packages/strapi-plugin-users-permissions/services/Providers.js
index 867c0efd9c..301a0de212 100644
--- a/packages/strapi-plugin-users-permissions/services/Providers.js
+++ b/packages/strapi-plugin-users-permissions/services/Providers.js
@@ -12,6 +12,7 @@ const request = require('request');
 const purest = require('purest')({ request });
 const purestConfig = require('@purest/providers');
 const { getAbsoluteServerUrl } = require('strapi-utils');
+const jwt = require('jsonwebtoken');
 
 /**
  * Connect thanks to a third-party provider.
@@ -161,6 +162,23 @@ const getProfile = async (provider, query, callback) => {
         });
       break;
     }
+    case 'cognito': {
+      // get the id_token
+      const idToken = query.id_token;
+      // decode the jwt token
+      const tokenPayload = jwt.decode(idToken);
+      if (!tokenPayload) {
+        callback(new Error('unable to decode jwt token'));
+      } else {
+        // Combine username and discriminator because discord username is not unique
+        var username = `${tokenPayload['cognito:username']}`;
+        callback(null, {
+          username: username,
+          email: tokenPayload.email,
+        });
+      }
+      break;
+    }
     case 'facebook': {
       const facebook = purest({
         provider: 'facebook',