📊Tracking: AWS SSO

Add your +1 👍 to help us prioritize high-level constructs for this service
---

### Overview:

AWS Single Sign-On is a cloud-based single sign-on (SSO) service that makes it easy to centrally manage SSO access to all of your AWS accounts and cloud applications. Specifically, it helps you manage SSO access and user permissions across all your AWS accounts in AWS Organizations. AWS SSO also helps you manage access and permissions to commonly used third-party software as a service (SaaS) applications, AWS SSO-integrated applications as well as custom applications that support Security Assertion Markup Language (SAML) 2.0. AWS SSO includes a user portal where your end-users can find and access all their assigned AWS accounts, cloud applications, and custom applications in one place.

[AWS Docs](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html)

### Maturity: CloudFormation Resources Only

See the [AWS Construct Library Module Lifecycle doc](https://github.com/aws/aws-cdk-rfcs/blob/master/text/0107-construct-library-module-lifecycle.md) for more information about maturity levels.

### Implementation:

See the [CDK API Reference](https://docs.aws.amazon.com/cdk/api/latest/docs/aws-sso-readme.html) for more implementation details.

### Issue list:

---
This is a 📊Tracking Issue

Start with the AWS Docs link to understand AWS Single Sign-On, then review the CDK API Reference and the construct library module lifecycle document. The issue is a tracking request rather than a scoped implementation task; work is complete only after a concrete construct scope and implementation plan are defined.

Written by the indexing model from the issue text.