[gkop]

Ahh! So saml2aws is authenticating to the same IdP to which you are authenticating in the browser in the first paragraph?

Sorry, I thought you were trying to gain convenience by simulating SSO.