Since SSO roles change all the time, the config file will become out of date quickly. To ensure that it is always fresh, make sure the config file is regenerated on a schedule and also triggered manually.
Artifact goes into a bucket. That bucket has event notifications enabled. What happens from that point is a downstream problem.