AWS SSO External SAML Identity Provider Invalid MFA Credentials Error

Question

I am trying to setup the new AWS SSO service with an external SAMLv2 based IdP. I have tried to configure the service with both KeyCloak and Okta to no avail. I follow the Okta