Using Auth0 to generate AWS temporary credentials with SSO

[andrew.shepherd]

We are considering using Auth0 to manage SSO for user access to the AWS Console as outlined in the official Auth0 guide here

Configure Amazon Web Services for Single Sign-On

If we follow this setup then our users with be able to login to the AWS Console under predefined AWS roles.
Our users also need to access AWS using the same roles but from the command line.
There is currently no Auth0 documentation or guidance on how to do this.

There is/was some legacy functionality that looks relevant but this is disabled since 2017 without any replacement

Integrate with Amazon Web Services and Products

A question about Auth0+AWS temporary credentials has been raised previously on this forum but without a specific answer.

How do you achieve the functionality described in the guide "Obtain AWS Tokens to securely call AWS APIs and resources" after June 8, 2017?

The guide “Obtain AWS Tokens to securely call AWS APIs and resources” ( Integrate with Amazon Web Services and Products) describes the exact functionality that I want, but I created my Auth0 account after June 8, 2017. How do I achieve the functionality described in the guide with the API resources available to accounts created after June 8, 2017?

Is anyone else out there using Auth0 SSO to generate temporary AWS credentials for the AWS CLI? Does anyone have experience of attempting this and what issues were encountered?

[jesus.tovar]

I have been looking for the same, among the only few tools I could find out there was saml2aws which is open source, however, it does not seem to be actively maintained

I am interested to know if Auth0 provides any sort of tooling for this purpose.

[andrew.shepherd]

We were provided with this without warranty as an example of how AWS authentication should be done from the shell using Auth0 and SAML or OIDC

GitHub - Adam-Auth0/aws-cli-authz: Node Cli to authenticate a user with Auth0 and authorise access to AWS Cli