Versent/saml2aws

Health v2 · maintenance only

Adoption not part of the score

2241 stars · 620 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

saml2aws is a Go CLI tool that authenticates against SAML-based identity providers such as ADFS and PingFederate and exchanges the SAML assertion with AWS STS to obtain temporary AWS credentials. It saves those credentials to an AWS profile so users can seamlessly use the AWS CLI and SDKs with federated single sign-on.

Use cases

• log in to AWS CLI using my company's SAML single sign-on
• get temporary AWS credentials from ADFS
• authenticate AWS CLI with PingFederate
• assume an AWS role via SAML assertion from the command line
• avoid long-lived AWS access keys by using federated SSO credentials
• configure multiple AWS accounts behind one SAML identity provider
• use AWS CLI with corporate identity provider credentials

When to choose

• your organization uses a SAML 2.0 identity provider like ADFS, PingFederate, or Okta for AWS access
• you want short-lived STS credentials instead of static IAM keys
• you need a scriptable, cross-platform CLI for federated AWS login
• you manage multiple AWS accounts and roles through one SSO flow

When to avoid

• your organization uses AWS IAM Identity Center (AWS SSO) natively, where the built-in aws sso login is simpler
• you need OIDC/OAuth-based federation rather than SAML
• you want a GUI-based SSO experience rather than a terminal tool
• you don't use AWS

Facets

cli-tool · maturity active

auth cli security cloud-computing security developer-tools windows cli cross-platform aws saml sso adfs pingfederate sts temporary-credentials federated-identity go command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Versent/saml2aws")