Hi, This morning we updated https://demo.cilogon.org/ to display the CILogon id_token value after authentication. This should make it easier to experiment with using CILogon id_tokens for AWS Roles (and other things). I'll update my "How to configure an AWS Role to accept CILogon ID Tokens" writeup [1] accordingly.
-Jim [1] https://gist.github.com/jbasney/51cc2403a2f6ffbf4c851f38ca19c173
