Chrome AWS SAML Token Expiry Reminder
Item media 2 screenshot
Item media 1 screenshot
Item media 2 screenshot
Item media 1 screenshot
Item media 1 screenshot
Item media 2 screenshot

Overview

Re-authenticate with AWS federated ADFS (SAML) credentials when they expire.

>>> UPDATE v1.0.12 - Detect console page as success after posting for reauth, to support Shibboleth (thanks walterking) - minor improvements >>> UPDATE v1.0.10 - fixed a stupid bug from previous update which broke re-auth. Sorry. >>> UPDATE v1.0.9 - fixed bug for authentication with no existing role/credentials - added an option to not show notification popup - published to Github (https://github.com/gitlon/CASTER) >>> WHY AWS ADFS Federation (SAML) tokens have a maximum expiry of 1 hour. Until Amazon change this limit, you are forced to re-login every 1 hour to use ADFS credentials for the AWS console and/or APIs. This is annoying. This CASTER extension automates the re-login, as well as providing an indication of the time remaining until the current AWS credentials expire. >>> HOW - look at cookies from the AWS Console websites - parse out the current user, role and expiry time - when nearly expired, try to post to the specified ADFS URL to regenerate a SAML token - then post again, to the common AWS SAML login page, to select the current AWS role - if successful, the result is another credentialled-login for another 1 hour. This only works if your credentials are saved - ie that you can navigate to your ADFS page and not be prompted for username and password after the first login. >>> YOU (THE USER) MUST DO THIS You MUST enter *your own* organisation's ADFS url, including the AWS role-provider. Eg: - https://YOURADFS.com/adfs/ls/idpinitiatedsignon?loginToRp=urn:amazon:webservices/ You should also review the default options. >>> OPTIONS - Attempt re-authentication as the current user/role? - Show a Chrome notification before credentials are nearly expired? - The URL for your organisation's ADFS endpoint - When (minutes before) to change the icon time text to yellow - When to change the icon time text to red - When to show the Chrome notification - When to attempt to re-authenticate >>> WHY THESE PERMISSIONS CASTER only needs permissions to two websites: your ADFS URL, and the standard AWS SAML role-choice page. Because you set your ADFS URL as an option, this can't be declared as a permission request. Therefore the extensions declares a request for "all websites". (This will be refined in a later version.) >>> OTHER DETAILS - What does CASTER mean? Chrome AWS SAML Token Expiry Reminder. - I don't want you to steal my AWS or company passwords!? CASTER doesn't store any passwords, or collect or send any private data. It gathers from readily-accessible cookies, and reposts using credentials saved by your browser - in the same way that a user would. You can easily review the extension code to confirm that this is the case. - Organization is spelled wrong in this text!? Not in Australia. - This extension looks like it was written by some newbie that only just learned about Chrome Extensions and Javascript!! Yes. - Feature XYZ could be done so much better!? Please contribute: https://github.com/gitlon/CASTER - Is this an official, supported product? CASTER is in no way related to, supported by or approved by Amazon, AWS or Amazon Web Services, or any other organisation. It was written by one individual for his own purposes, and is provided to the public without any warranty or guarantee that it is fit for any purpose. - How do we berate you? Send questions, comments or whisky to: caster [dot] extension [at] gmail.com.

5 out of 53 ratings

Google doesn't verify reviews. Learn more about results and reviews.

Review's profile picture

nzspambotAug 16, 2015

Great extension; must hve been a very smart Dev to make this one!!!

1 person found this review to be helpful
Review's profile picture

LantrixAug 9, 2015

No longer stuck with 1 hour AWS SAML sessions... Thanks.

1 person found this review to be helpful

Details

  • Version
    1.0.12
  • Updated
    August 18, 2015
  • Offered by
    CASTER
  • Size
    36.62KiB
  • Languages
    English
  • Non-trader
    This developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.

Privacy

The developer has not provided any information about the collection or usage of your data.

Support

Related

AWS Role Editor

5.0(10)

This extension allows you to modify your AWS Roles.

AWS Helper

5.0(4)

Extension to help with using AWS Console

AWS SAML Keys

0.0(0)

Generate AWS access keys from a SAML login to the AWS console.

SAML Assertion to AWS STS Assumption

0.0(0)

Assumes an STS role and produces usable session credentials for CLI tools from an intercepted SAML assertion

AWS Extend Switch Roles

4.9(82)

Extend your AWS IAM switching roles. You can set the configuration like aws config format

Refined AWS Console

0.0(0)

Simplifies the Amazon Web Services Console interface.

SAML to AWS STS Keys Conversion

3.9(10)

Generates file with AWS STS Keys after logging in to AWS webconsole using SSO (SAML 2.0). It leverages 'assumeRoleWithSAML' API.

AWS Region Color Highlights

4.5(4)

In the AWS console's top right nav bar, the Region name will be uniquely colored so you'll know what Region you're in at all times.

AWS State Machine JSON Parser

5.0(3)

Extension to make improvements to the AWS State Machine execution ui nicer

AWS Sidebar

4.0(4)

AWS Console Navigation Sidebar for Chrome

aws-launcher

4.5(4)

The easiest way to launch the console page of AWS services

Real AWS Status

5.0(8)

Make the aws status page a bit more useful during outages

AWS Role Editor

5.0(10)

This extension allows you to modify your AWS Roles.

AWS Helper

5.0(4)

Extension to help with using AWS Console

AWS SAML Keys

0.0(0)

Generate AWS access keys from a SAML login to the AWS console.

SAML Assertion to AWS STS Assumption

0.0(0)

Assumes an STS role and produces usable session credentials for CLI tools from an intercepted SAML assertion

AWS Extend Switch Roles

4.9(82)

Extend your AWS IAM switching roles. You can set the configuration like aws config format

Refined AWS Console

0.0(0)

Simplifies the Amazon Web Services Console interface.

SAML to AWS STS Keys Conversion

3.9(10)

Generates file with AWS STS Keys after logging in to AWS webconsole using SSO (SAML 2.0). It leverages 'assumeRoleWithSAML' API.

AWS Region Color Highlights

4.5(4)

In the AWS console's top right nav bar, the Region name will be uniquely colored so you'll know what Region you're in at all times.

Google apps