How to create a user in an Amazon Cognito User Pool for a user that is not yet logged in to my app and who is using a SAML federated identity?

Question

I have a simple web app that utilizes Amazon Cognito for auth and user management. A user can belong to one or more groups in the app. An app user maps to a Cognito User and