SAML to AWS STS Keys (Multi-Account)

Generates AWS STS credentials via SAML 2.0 SSO. Saves separate credentials_<account_id> files per AWS account.

SAML to AWS STS Keys (Multi-Account) automatically captures your temporary AWS credentials right after you log in to the AWS Console via your company's SSO (SAML 2.0 Identity Provider — Okta, Azure AD, Google Workspace, ADFS, etc.). If your organization uses SSO for AWS access, you have no permanent IAM users — meaning no static keys for the AWS CLI or SDK. This extension solves that by intercepting the SAML login and calling the AWS STS assumeRoleWithSAML API on your behalf. Key features: - Automatically downloads credentials right after SSO login — no manual steps - Multi-account support: saves a separate file per AWS account (credentials_123456789012), so credentials for all your accounts coexist without overwriting each other - Configurable filename prefix, session duration, and support for cross-account role chaining - Works seamlessly with the AWS CLI — just point ~/.aws/credentials to the downloaded file