Demo SSO

Two sign-in paths, one user pool. Whichever you use, the pages behind this form read the same cognito:groups claim.