Nice post Ben. Came across this when we stumbled upon a bug/problem in the JavaSDK:

https://github.com/aws/aws-sdk-java-v2/issues/3679

There are a lot of workarounds to this which is not very user-friendly, and in general for those not aware it makes them sit unproductive for 15 mins while waiting for SSO to refresh.

Have you encountered this, or have any comments?