Integrate with AWS without AD?

[ga-core]

Can we use DAG without AD integration (and without another Idp provider)? In short can we use Duo for aws access but manage users only in Duo instead of synching with another idp?

[mkorovesisduo]

Our AWS application can only be used when integrated with an IdP. Duo itself cannot be the authentication source.

[ga-core]

But we could use AD + ADFS(?) + DAG without the need for AWS SSO? Any other simpler way?