yep, this does the trick, thanks for playing the rubber duck for me, slack channel (sorry):

this.auth = new sst.Auth(this, "Auth", {
            cognito: false,
            identityPool: {
                identityPoolName: "<http://convento.app|convento.app>",
                developerProviderName: "<http://login.convento.app|login.convento.app>",
                allowUnauthenticatedIdentities: true,
            },
        });

you're welcome!

lol… @Adrian Schweizer a couple of examples here with Identity Pool + Fb/Google/Twitter/Auth0, all without using User Pool https://serverless-stack.com/examples/index.html#auth

nice, thanks a lot