Cyberduck Mountain Duck CLI

#11568 new enhancement

Support for AWS SSO / Session Token Authentication

Reported by: benhouse Owned by:
Priority: normal Milestone: 8.0
Component: s3 Version: 7.8.2
Severity: normal Keywords:
Cc: Architecture:
Platform:

Description (last modified by dkocher)

Hello!

I'm in the process of migrating from AWS IAM user / AssumeRole authentication to using the AWS Single Sign-On service. Cyberduck has worked great with the user/role auth, and I have a couple feature requests that I think would allow it to work with AWS SSO.

For an Amazon S3 connection, add a field to enter an AWS Session Token directly, along with the access key id and secret access key. AWS SSO presents a nice copy/paste window for session credentials, and it would be easy for a user to copy/paste the values from "Option 3" (below) into Cyberduck when connecting. This is a screenshot of the AWS SSO login page that presents temporary credentials and how to use them.

AWS SSO Screenshot

Another option would be to upgrade to aws java sdk v2 which supports the SSO credentials provider. There's an open issue for support in the aws java v1 sdk, but I'm not sure if it will be implemented.

I'm supporting Cyberduck users that have limited text editor / terminal experience, so a workflow that relies on them making changes to ~/.aws/credentials to update their access keys / session token is cumbersome.

Thank you! - Ben

Attachments (1)

SSO.png (228.9 KB) - added by benhouse on Jan 29, 2021 at 7:46:28 PM.
AWS SSO Screenshot

Download all attachments as: .zip

Change History (9)

Changed on Jan 29, 2021 at 7:46:28 PM by benhouse

AWS SSO Screenshot

comment:1 Changed on Jan 29, 2021 at 7:47:36 PM by benhouse

  • Description modified (diff)

comment:2 Changed on Jan 29, 2021 at 8:04:40 PM by benhouse

  • Component changed from sftp to s3

comment:3 Changed on Feb 16, 2021 at 9:34:58 AM by dkocher

  • Summary changed from AWS SSO / Session Token Authentication with Cyberduck to Support for AWS SSO / Session Token Authentication

comment:4 Changed on Apr 6, 2021 at 7:20:17 PM by dkocher

  • Description modified (diff)

comment:5 Changed on Apr 6, 2021 at 7:20:44 PM by dkocher

#11642 closed as duplicate.

comment:6 Changed on Jun 21, 2021 at 1:46:18 PM by gchongong

Any update on this ticket? Has a resolution been found yet? Thanks

comment:7 Changed on Sep 10, 2021 at 8:29:30 AM by dkocher

#11795 closed as duplicate.

comment:8 Changed on Sep 10, 2021 at 8:29:49 AM by dkocher

  • Milestone set to 8.0
Note: See TracTickets for help on using tickets.