Single Sign-On AWS CLI access using SAML 2.0

CLI tool which enables you to login and retrieve AWS temporary credentials using SAML with ADFS

This is based on python code from How to Implement Federated API and CLI Access Using SAML 2.0 and AD FS.

How you can implement federated API and CLI access for your users using AWS Go SDK:

Prompt user for credentials
Opens the initial IdP url and follows all of the HTTP302 redirects
Programmatically get the SAML assertion
Parse the response and extract all the necessary values
Exchange the role and SAML assertion with AWS STS service to get a temporary set of credentials
Save these creds to an aws profile named "saml"

Requirements

Identity Provider
- ADFS (2.x or 3.x)
AWS SAML Provider configured

Usage

go get -u github.com/spf13/cobra/cobra

cobra init github.com/sergiubodiu/sso-aws -a "Sergiu Bodiu" -l MIT