Demo SSO
Two sign-in paths, one user pool. Whichever you use, the pages behind this form read the same cognito:groups claim.
or
The SSO button is inert until SSO_PROVIDER and COGNITO_DOMAIN are set and the identity provider is registered on the user pool. The password form above works regardless.