Versent / saml2aws

CLI tool which enables you to login and retrieve AWS temporary credentials using a SAML IDP
https://github.com/Versent/saml2aws
MIT License
2.08k stars 562 forks source link

Google Apps unsupported second factor #311

Open wdalmut opened 5 years ago

wdalmut commented 5 years ago

Hi,

i'am trying out this project,. On our google account we use the u2f as second factor auth (and google authenticator and phone push confirms as alternatives) and saml2aws is unable to generate temporary credentials and fails with this error:

error authenticating to IdP: error loading challenge page: unsupported second factor: /signin/challenge/sk/6

Anyone have the same problem?

Bests Walter

wdalmut commented 5 years ago

Without the u2f technology as mfa everything works correctly

jstangroome commented 5 years ago

I have a very similar error:

error authenticating to IdP: error loading challenge page: unsupported second factor: /signin/challenge/sk/5 

My Google Account 2FA is configured to use my Yubikey 5 NFC by default. image