Source: https://docs.aws.amazon.com/singlesignon/latest/userguide/sso-ug.pdf