A short, reproducible guide to wiring ArgoCD login to AWS Identity Center using ArgoCD's bundled Dex as a SAML service provider. Works whether IdC's identity source is its own directory or an external IdP (e.g. Google), with a couple of non-obvious gotchas that will cost you hours if you miss them (see Gotchas). Why this approach Access governed in IdC : grant/revoke ArgoCD like AWS account access; one plane to on/offboard. No client secret : SAML trust is cert-based (I...