Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SAML not working with MFA in Okta Identity Engine #73

Open
andy-mehta opened this issue Jul 1, 2024 · 0 comments
Open

SAML not working with MFA in Okta Identity Engine #73

andy-mehta opened this issue Jul 1, 2024 · 0 comments

Comments

@andy-mehta
Copy link

andy-mehta commented Jul 1, 2024

Using the new Okta identity engine, I set my ~/.aws/config file with a profile

[profile trial]
region             = us-gov-west-1
credential_process = aws-okta-processor authenticate --user [email protected] --organization trial-1234567.okta.com --application https://trial-1234567.okta.com/home/amazon_aws/StringyBits/272 --region us-gov-west-1 --duration 43200

then I ran

aws-okta-processor authenticate --user [email protected] --organization trial-1234567.okta.com --application https://trial-1234567.okta.com/home/amazon_aws/StringyBits/272 --region us-gov-west-1 --duration 43200

which resulted in

Password: 
Info: Calling https://trial-1234567.okta.com/api/v1/authn
Info: Calling https://trial-1234567.okta.com/api/v1/sessions
Info: Calling https://trial-1234567.okta.com/home/amazon_aws/StringyBits/272
SAMLResponse tag not found due to MFA challenge.
Creating new Okta session.
Password: 
Info: Calling https://trial-1234567.okta.com/api/v1/authn
Info: Calling https://trial-1234567.okta.com/api/v1/sessions
Info: Calling https://trial-1234567.okta.com/home/amazon_aws/StringyBits/272
SAMLResponse tag not found due to MFA challenge.
ERROR: SAMLResponse tag was not found!

Also ran the above command appending --factor push:okta and --factor token:software:totp:okta which yielded the same error.

It seems aws-okta-processor may not function properly with the Okta Identity Engine. Can this be fixed for a future release?
Thank you.

(customer sensitive info removed)

@andy-mehta andy-mehta changed the title SAML not working with MFA SAML not working with MFA in Okta Identity Engine Jul 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant