// that are necessary to enable single sign-on authentication with the AWS CLI.
// Support for other OIDC flows frequently needed for native applications, such as
// Authorization Code Flow (+ PKCE), will be addressed in future releases.
// - The service emits only OIDC access tokens, such that obtaining a new token
// (For example, token refresh) requires explicit user re-authentication.
// - The access tokens provided by this service grant access to all AWS account
// entitlements assigned to an IAM Identity Center user, not just a particular
// application.
// - The documentation in this guide does not describe the mechanism to convert
// the access token into AWS Auth (“sigv4”) credentials for use with IAM-protected
// AWS service endpoints. For more information, see GetRoleCredentials (https://docs.aws.amazon.com/singlesignon/latest/PortalAPIReference/API_GetRoleCredentials.html)
// in the IAM Identity Center Portal API Reference Guide.