4 ms·
For interactive cli use (that is: a person sitting at a computer), SSO is directly supported. `aws sso login ` pops up the web browser, starts the sso login flo
by Xylakant 6y ago
For interactive cli use (that is: a person sitting at a computer), SSO is directly supported. `aws sso login ` pops up the web browser, starts the sso login flow and temporary credentials are issued for the cli. Has been working pretty neat for us.
- pnathan 6y agoI stand corrected, it seems like! Looks like it rolled out last Nov for the named profiles from the RSS feed. very happy to see work on this front!!
- orf 6y agoThis doesn't work if you use OneLogin with IDP initiated login (and multiple accounts). Which sucks. We've had to write our own tooling, and you even need to use an extension like this[1] :( 1. https://chrome.google.com/webstore/detail/saml-to-aws-sts-keys-conv/ekniobabpcnfjgfbphhcolcinmnbehde?hl=en https://chrome.google.com/webstore/detail/saml-to-aws-sts-ke...
- Xylakant 6y agoWe used to use something similar (for office365/AzureAD), but the aws cli Version 2.0 in combination with the changes for aws sso late last year made that obsolete. You may want to check again if your case is now supported. I was pleasantly surprised, even though I had to do the saml setup dance again.
- dastx 6y agoHave you considered saml2aws[0]? [0] https://github.com/Versent/saml2aws https://github.com/Versent/saml2aws