Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

First factor_type always selected if factor set in .okta-aws config #201

Open
mdietz opened this issue Nov 18, 2022 · 0 comments
Open

First factor_type always selected if factor set in .okta-aws config #201

mdietz opened this issue Nov 18, 2022 · 0 comments

Comments

@mdietz
Copy link

mdietz commented Nov 18, 2022

Describe the bug
If there are multiple valid factor_types supported by a given provider, the first is always selected if a factor is set in the ~/.okta-awsconfig file:

factor_choice = index
.

To Reproduce

  1. Set factor = OKTA in .okta-aws file.
  2. Run okta-awscli as a user with Okta Verify enabled but Okta Verify push notifications disabled as a valid factor.
  3. okta-awscli blocks on "Waiting for push verification..." but no push is sent.

Expected behavior
Either:

  1. okta-awscli gracefully handles the Okta response (I'm making an assumption that Okta will respond that it cannot send a push notification if that's a disabled factor for the user) and falls back to Okta Verify TOTP.
  2. Allow a factor_type to be specified in the config file.

Environment (please complete the following information):

  • OS: MacOS
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant