search

Versent / saml2aws

CLI tool which enables you to login and retrieve AWS temporary credentials using a SAML IDP
https://github.com/Versent/saml2aws
MIT License
2.07k stars 563 forks source link

[Google Provider] how to force to use SMS token instead #519

Open chrisduong opened 4 years ago

chrisduong commented 4 years ago

Hi,

The current Auto mode for MFA sometimes didn't work for me, for some unknown reason Google return the unrecognized format page.

error authenticating to IdP: page is missing saml assertion

So I decided to switch to SMS token which elimated that problem, I set mfa = sms. However I received this warning

error building IdP client: Invalid MFA type: sms for GoogleApps provider
jamietanna commented 2 years ago

It looks like the provider only supports Auto https://github.com/Versent/saml2aws/blob/700801dc8dfd0422de09f280d8828ba0f742e325/saml2aws.go#L43

Amending it doesn't seem to be changing behaviour 🤔