Caching SAML Assertion about gsts HOT 3 CLOSED

Hi @Mattias- , sorry for not getting back to you earlier!

You mean something like --saml-assertion which, if set, would store the raw SAML response?

Are you able to provide a more concrete example of the use case?

from gsts.

Hi there @ruimarinho ,
Yes something like that!
The main use case is to get a robust way of figuring out what roles that a user is able to assume and build some tooling around that.
From the SAML assertion file it's possible to retrieve all roles that the user is able to assume.
Ask the user to pick one of them. Continue with authentication.

A secondary use case I'm interested in is to improve the speed of assuming multiple roles in many accounts within a short time window. Since the SAML assertion is valid for multiple minutes I think it would be clever to re-use it.

from gsts.

This will be released on the next major version, being drafted on #82.

from gsts.