# SignInPolicy

Sign-in policy for User Pools.

- Source: [`aws-cognito/lib/user-pool.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-cognito/lib/user-pool.ts#L495)
- Type last changed: v2.179.0 · 18 Feb 2025

## Example

```ts
new cognito.UserPool(this, 'myuserpool', {
  signInPolicy: {
    allowedFirstAuthFactors: { password: true, passkey: true },
  },
  passkeyRelyingPartyId: 'auth.example.com',
  passkeyUserVerification: cognito.PasskeyUserVerification.REQUIRED,
});
```

## Properties

- `allowedFirstAuthFactors`: [AllowedFirstAuthFactors](/cdk/api/v2/docs/aws-cdk-lib.aws_cognito.AllowedFirstAuthFactors.html) — The types of authentication that you want to allow for users' first authentication prompt.

  **Default:** Password only