For more dynamic control this is a better approach, like getting the AWS key ID and secret along with signing in, while SAML one is straight forward enough to do browser based federation