<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z0000AA1Wn5CQFOkta Classic EngineAuthenticationAnswered2025-07-15T09:00:33.000Z2024-06-12T20:12:21.000Z2024-06-13T17:20:30.000Z

yz517 (yz517) asked a question.

gimme-aws-creds was broken when okta enforced MFA, but web access was still working

For about 4 hours yesterday on 6/11/2024 from about 9am - 1pm pacific time, none of our users were able to access gimme-aws-creds. Everyone was receiving the following error:

 

Traceback (most recent call last):

File "/opt/homebrew/bin/gimme-aws-creds", line 17, in <module>

GimmeAWSCreds().run()

File "/opt/homebrew/Cellar/gimme-aws-creds/2.8.2_2/libexec/lib/python3.12/site-packages/gimme_aws_creds/main.py", line 453, in run

self._run()

File "/opt/homebrew/Cellar/gimme-aws-creds/2.8.2_2/libexec/lib/python3.12/site-packages/gimme_aws_creds/main.py", line 876, in _run

for data in self.iter_selected_aws_credentials():

File "/opt/homebrew/Cellar/gimme-aws-creds/2.8.2_2/libexec/lib/python3.12/site-packages/gimme_aws_creds/main.py", line 845, in iter_selected_aws_credentials

aws_results = executor.map(generate_credentials_prepare_data, self.aws_selected_roles)

^^^^^^^^^^^^^^^^^^^^^^^

File "/opt/homebrew/Cellar/gimme-aws-creds/2.8.2_2/libexec/lib/python3.12/site-packages/gimme_aws_creds/main.py", line 727, in aws_selected_roles

selected_roles = self._get_selected_roles(self.requested_roles, self.aws_roles)

^^^^^^^^^^^^^^

File "/opt/homebrew/Cellar/gimme-aws-creds/2.8.2_2/libexec/lib/python3.12/site-packages/gimme_aws_creds/main.py", line 718, in aws_roles

self.saml_data['SAMLResponse'],

^^^^^^^^^^^^^^

File "/opt/homebrew/Cellar/gimme-aws-creds/2.8.2_2/libexec/lib/python3.12/site-packages/gimme_aws_creds/main.py", line 709, in saml_data

self._cache['saml_data'] = saml_data = self.okta.get_saml_response(self.aws_app['links']['appLink'], self.auth_session)

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

File "/opt/homebrew/Cellar/gimme-aws-creds/2.8.2_2/libexec/lib/python3.12/site-packages/gimme_aws_creds/okta_classic.py", line 794, in get_saml_response

saml_response = self.get_saml_response(saml_request_url)

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

File "/opt/homebrew/Cellar/gimme-aws-creds/2.8.2_2/libexec/lib/python3.12/site-packages/gimme_aws_creds/okta_classic.py", line 801, in get_saml_response

raise RuntimeError(saml_error)

RuntimeError: Did not receive SAML Response after successful authentication

 

Were there any changes that were made yesterday that had to be reverted. We didn't do anything to fix it, it just started working again.


  • Mihai N. (Okta, Inc.)

    Hi @yz517 (yz517)​ , Thank you for reaching out to the Okta Community! 

     

    There were some issues a couple of days ago according to status.okta.com , but nothing pertaining to MFA/aws.  

    The Okta Community Questions forum isn't really meant for in-depth troubleshooting, so I recommend opening a case to continue the discussion with the Support Team. They'll be able to access additional tools and resources to help you get to the bottom of it.  

     

     

     

     

    If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you. 

     

    Hope my answer helps! 

     

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Expand Post
    Selected as Best
  • Mihai N. (Okta, Inc.)

    Hi @yz517 (yz517)​ , Thank you for reaching out to the Okta Community! 

     

    There were some issues a couple of days ago according to status.okta.com , but nothing pertaining to MFA/aws.  

    The Okta Community Questions forum isn't really meant for in-depth troubleshooting, so I recommend opening a case to continue the discussion with the Support Team. They'll be able to access additional tools and resources to help you get to the bottom of it.  

     

     

     

     

    If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you. 

     

    Hope my answer helps! 

     

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Expand Post
    Selected as Best
This question is closed.
Loading
gimme-aws-creds was broken when okta enforced MFA, but web access was still working