# SignInPolicyProperty

The policy for allowed types of authentication in a user pool.

To activate this setting, your user pool must be in the [Essentials tier](https://docs.aws.amazon.com/cognito/latest/developerguide/feature-plans-features-essentials.html) or higher.

- Source: Generated code
- Type last changed: v2.172.0 · 7 Dec 2024

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_cognito as cognito } from 'aws-cdk-lib';
const signInPolicyProperty: cognito.CfnUserPool.SignInPolicyProperty = {
  allowedFirstAuthFactors: ['allowedFirstAuthFactors'],
};
```

## Properties

- `allowedFirstAuthFactors`: string[] — The sign-in methods that a user pool supports as the first factor.

  You can permit users to start authentication with a standard username and password, or with other one-time password and hardware factors.

  Supports values of `EMAIL_OTP` , `SMS_OTP` , `WEB_AUTHN` and `PASSWORD` ,