True to enable IAM federation authentication for a domain.
Element of the IAM federation assertion to use for backend roles. Default is roles.
roles
Element of the IAM federation assertion to use for the user name. Default is sub.
sub