https://tossolution.com/2020/10/aws-single-sign-on/