def disable_sso(DirectoryId=None, UserName=None, Password=None):
    """
    Disables single-sign on for a directory.
    See also: AWS API Documentation
    
    
    :example: response = client.disable_sso(
        DirectoryId='string',
        UserName='string',
        Password='string'
    )
    
    
    :type DirectoryId: string
    :param DirectoryId: [REQUIRED]
            The identifier of the directory for which to disable single-sign on.
            

    :type UserName: string
    :param UserName: The username of an alternate account to use to disable single-sign on. This is only used for AD Connector directories. This account must have privileges to remove a service principal name.
            If the AD Connector service account does not have privileges to remove a service principal name, you can specify an alternate account with the UserName and Password parameters. These credentials are only used to disable single sign-on and are not stored by the service. The AD Connector service account is not changed.
            

    :type Password: string
    :param Password: The password of an alternate account to use to disable single-sign on. This is only used for AD Connector directories. For more information, see the UserName parameter.

    :rtype: dict
    :return: {}
    
    
    """
    pass
