post
https://api.valmarpayments.com/auth/sso/validate
Decrypts and validates an SSO token (public - the token itself is the credential), then starts the Cognito CUSTOM_AUTH flow and answers the SSO_TOKEN challenge, returning a session for the OTP step.