Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Load saml from responses #52

Merged
merged 6 commits into from
Sep 10, 2018
Merged

Load saml from responses #52

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
c331642
Load saml from responses
Aug 7, 2018
29be711
Remove ARNs from config, cli
Aug 7, 2018
2d116e3
Ensure README reflects reality
Aug 7, 2018
0f1b7a0
Handle empty role value in SAML
johananl Sep 5, 2018
d97f6ec
Run dep ensure
johananl Sep 10, 2018
55607b9
Refactor role selection
johananl Sep 10, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
96 changes: 89 additions & 7 deletions Gopkg.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

21 changes: 2 additions & 19 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -177,9 +177,7 @@ To create a OneLogin app, use the following command:

clisso apps create onelogin my-app \
--provider my-provider \
--app-id 12345 \
--principal-arn arn:aws:iam::123456789012:saml-provider/OneLogin \
--role-arn arn:aws:iam::123456789012:role/OneLoginSSO
--app-id 12345

The example above creates a OneLogin app configuration for Clisso, with the name `my-app`.

Expand All @@ -193,21 +191,13 @@ manually configure the app ID for every app.
>NOTE: The ID seen in the browser URL when visiting a OneLogin app as a user is **NOT** the app ID.
>Only a OneLogin administrator can obtain an app ID.

The `--principal-arn` is the ARN of the [identity provider][9] that was created on AWS IAM for the
OneLogin integration.

The `--role-arn` is the ARN of the IAM role that should be assumed following a successful
authentication against OneLogin.

#### Okta

To create an Okta app, use the following command:

clisso apps create okta my-app \
--provider my-provider \
--url https://mycompany.okta.com/home/amazon_aws/xxxxxxxxxxxxxxxxxxxx/137 \
--principal-arn arn:aws:iam::123456789012:saml-provider/Okta \
--role-arn arn:aws:iam::123456789012:role/OktaSSO
--url https://mycompany.okta.com/home/amazon_aws/xxxxxxxxxxxxxxxxxxxx/137

The example above creates an Okta app configuration for Clisso, with the name `my-app`.

Expand All @@ -220,12 +210,6 @@ clicking an app in the **Applications** view. The embed link is on the **General
>NOTE: An Okta embed link must not contain an HTTP query, only the base URL. For AWS apps, the link
should end with `/137`.

The `--principal-arn` is the ARN of the [identity provider][9] that was created on AWS IAM for the
Okta integration.

The `--role-arn` is the ARN of the IAM role that should be assumed following a successful
authentication against Okta.

### Deleting Apps

Deleting apps using the `clisso` command isn't currently supported. To delete an app, remove its
Expand Down Expand Up @@ -264,7 +248,6 @@ apps using `clisso apps ls`.
## Caveats and Limitations

- No support for Okta applications with MFA enabled **at the application level**.
- No support for IAM role selection.

## Contributing

Expand Down
Loading