common-fate / granted

The easiest way to access your cloud.
https://granted.dev
MIT License
956 stars 90 forks source link

[Feature request] Use a specific browser profile for authentication #634

Open khuongduybui opened 2 months ago

khuongduybui commented 2 months ago

Similar to how a browser profile can be specified when launching a console, I would also like to specify a browser profile to open the authentication links.

The main use case is I have a work browser profile where I log in to our company's SSO every morning. The SSO is linked to many things, including AWS SSO. If the authentication links open in this profile, I simply need to "accept", but it always open in the default browser profile, which is my personal profile, and I don't want to SSO into the work account from my personal profile because it messes up Google, Microsoft, and GitHub login sessions.

chrnorm commented 2 months ago

Hey @khuongduybui! You should be able to use the following command to achieve this:

granted browser set-sso

I'll close this issue but please reopen it if it doesn't work for you :)

khuongduybui commented 2 months ago

The problen with

granted browser set-sso

is it doesn't let me select a specific profile.

It doesn't let me enter a custom command either (with which I can inject the profile argument).

chrnorm commented 2 months ago

My apologies - I misread your initial question here as being related to selecting a browser rather than a browser profile. I’ve reopened the issue, this is something we should support for sure.

jaklan commented 2 months ago

+1 for that, I have exactly the same issue.

@chrnorm we talk about granted browser set-sso, but even for granted browser set - is it possible to set the default browser profile instead of specifying it each time when running assume?

assume profile-name -c --browser-profile "<your_browser_profile>"
DoctorPolski commented 2 months ago

I had this issue and solved it by using the profile settings in Edge itself to open/use a specific profile when it was given a specific URL.

But I agree, something more programmatic at the assume level is required to support browsers that may not have that feature.