CLI tool which enables you to login and retrieve AWS temporary credentials using with ADFS or PingFederate Identity Providers.
This is based on python code from How to Implement a General Solution for Federated API/CLI Access Using SAML 2.0.
The process goes something like this:
- Setup an account alias, either using the default or given a name
- Prompt user for credentials
- Log in to Identity Provider using form based authentication
- Build a SAML assertion containing AWS roles
- Optionally cache the SAML assertion (the cache is not encrypted)
- Exchange the role and SAML assertion with AWS STS service to get a temporary set of credentials
- Save these credentials to an aws profile named "saml"
Publisher’s description
What is saml2aws?
saml2aws is an open-source containers & devop program for Windows from Versent. It is written in Go.
Installation and requirements
Official installers exist for 64-bit, ARM64 and ARM as MSI and Portable. The installer supports unattended (silent) installation. An MSI package is available for deployment with Group Policy, Intune or Configuration Manager.
Popularity and file types
The Chocolatey package has been downloaded 99,750 times. The source code on GitHub (Versent/saml2aws) has 2,248 stars. Similar programs include Docker Desktop, Helm and Pulumi.
Project description on GitHub: “CLI tool which enables you to login and retrieve AWS temporary credentials using a SAML IDP”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Native ARM64 build for Windows on Arm
- MSI package for managed deployment
- Documented silent install
Cons
- No update for more than a year
In short: saml2aws is an open-source containers & devop tool for 64-bit, ARM64 and ARM PCs. Updates have slowed down. Administrators can deploy it unattended.
Is saml2aws safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
E78EC324F040047A36E6DE3B61BFF8DE5B4F6D093F0F3070539A54121CB88B00· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Security practices (OpenSSF Scorecard)
Automated checks of the Versent/saml2aws repository on GitHub by the Open Source Security Foundation, last run on August 15, 2022.
- Actively maintained10
- No known vulnerabilities10
- No dangerous workflows10
- Dependency update tool10
- Licence declared10
- No binaries in the repository10
- Published packages10
- Code review7
- Pinned dependencies5
- Branch protection3
- OpenSSF Best Practices badge0
- Restricted token permissions0
- Signed releases0
- Fuzzing0
- Security policy0
The score rates how the project is developed and released, not whether the program is safe to install. scorecard.dev
Recent versions
All 1 versions ›| Version | Date | Size | Files |
|---|---|---|---|
| 2.36.19Latest | March 13, 2025 | — | 64-bit ZIP64-bit MSIARM64 ZIPARM ZIP |
Install from the command line
Silent install ›winget install --id Versent.saml2aws -echoco install saml2aws -yscoop install main/saml2awsmsiexec /i saml2aws_2.36.19_windows_amd64.msi /qn /norestartmsiexec /x {5D33608C-E3F3-43A2-8FF5-5B2B209E0E7E} /qn /norestartProgram files (.exe): saml2aws.exe
Related guide: How to use winget: install and update apps
Also for other systems
brew install saml2awsInformation
- Publisher
- Versent
- Category
- Containers & DevOps
- Licence
- MIT
- Price
- Free
- Source code
- github.com/Versent/saml2aws
- Written in
- Go
- Requires
- Windows 11 / 10
- Architecture
- 64-bit, ARM64, ARM
- Installer
- MSI, Portable
- Version
- 2.36.19
- Released
- March 13, 2025
- Added to the catalogue
- April 9, 2025
- Versions listed
- 1
- Chocolatey downloads
- 99,750
- GitHub stars
- 2,248
- GitHub forks
- 631
- Website
- github.com
- winget ID
- Versent.saml2aws
- Chocolatey package
- saml2aws
- Scoop package
- main/saml2aws
- MSI product code
- {5D33608C-E3F3-43A2-8FF5-5B2B209E0E7E}
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to saml2aws
See all ›-
Docker Desktop4.97.0An application for macOS and Windows machines for the building and sharing of containerised applications.Proprietary2.2M ↓ -
Open source1.6M ↓ -
Open source395.6K ↓ -
Serverless Framework3.39.0Build applications on AWS Lambda and other next-gen cloud services, that auto-scale and only charge you when they run.Open source84.9K ↓ -
Kubernetes - Minikube - A Local Kubernetes Development Environment1.39.0minikube quickly sets up a local Kubernetes cluster on macOS, Linux, and Windows. We proudly focus on helping application developers and new Kubernetes users.Open source747.8K ↓ -
Open source2.3M ↓ -
Open source299.3K ↓ -
Terragrunt1.2.1Terragrunt is a thin wrapper for Terraform that provides extra tools for keeping your Terraform configurations DRY, working with multiple Terraform modules, and managing remote state.Open source122.2K ↓
Frequently asked questions
Is saml2aws free?
Yes. saml2aws is open-source software under the MIT licence.
Is saml2aws safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install saml2aws with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Can saml2aws be installed silently?
Yes. The silent install page lists the exact command for each installer, including msiexec for the MSI package.
Does saml2aws run on ARM (Windows on Arm)?
Yes, there is a native ARM64 installer.
What are alternatives to saml2aws?
Docker Desktop, Helm, Pulumi, Serverless Framework and Kubernetes - Minikube - A Local Kubernetes Development Environment. The alternatives page compares them.
