Support for AWS SSO authentication

[fdeswardt]

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
Provide ability to configure AWS SSO for authentication instead of Cognito which is the default authentication for AWS Organizations. Leverage SSO groups to assign 'users' and 'administrators' as well as consider a second group 'billing' to enable access for finance folks without giving them full admin access.

Describe alternatives you've considered
Cognito with SAML 2.0 to enterprise IDP

Additional context
AWS SSO has become popular for managing enterprise users' access and authorization to AWS accounts in AWS Organizations, and it will be really helpful to seamlessly integrate support for AWS SSO.

[fivehorizons]

I am curious also about setting up SSO and some Azure AD app listing triggers

[fivehorizons]

@fdeswardt tagging you check and see how this worked out?

[kapilt]

cognito federated identity provider can back to aws sso