Understanding Key AWS Single Sign-On Concepts