v2.0.3

What's Changed

• fix: SMS MFA fails when device has a custom display name by @jordanbreen28 in #99

New Contributors

• @jordanbreen28 made their first contribution in #99

Full Changelog: v2.0.2...v2.0.3

v2.0.2

What's Changed

• feat: display the MFA label with the user selected name by @DougEdey-Slice in #98

New Contributors

• @DougEdey-Slice made their first contribution in #98

Full Changelog: v2.0.1...v2.0.2

v2.0.1

Fix

• Declares the keyring dependency. v2.0.0 crashed on a fresh install with ModuleNotFoundError: No module named 'keyring' — the OSX-keychain feature imports keyring at startup, but it wasn't in install_requires (and requirements.txt named the wrong package). Fresh pip install now works.

Internal

• Added a CLI-import smoke test so a runtime dependency missing from packaging fails CI.

Upgrade: pip install --upgrade onelogin-aws-assume-role

v2.0.0

⚠️ Breaking changes

• Removed the onelogin SDK dependency. The tool now talks to the OneLogin REST API directly via requests. This fixes installs that broke on newer onelogin SDK versions and removes the stale onelogin==2.0.4 pin (#76).
• Python 3.8+ required. Dropped Python 2.7 / 3.5.

Fixed

• #76 — ModuleNotFoundError / dead onelogin==2.0.4 pin. The SDK was rewritten as an OpenAPI-generated client whose SAML-assertion model rejects the success response; the tool no longer depends on it.
• #69 — a wrong/unauthorized AWS app id (or other non-recoverable error) now fails fast instead of re-submitting credentials up to 6 times, which could lock the OneLogin account.

Added

• Direct, dependency-light OneLogin client (aws_assume_role/onelogin_client.py) with unit tests.
• GitHub Actions CI: test matrix on Python 3.8–3.12, and automated PyPI publishing on release.

Notes

This release reworks the authentication path. If you hit a problem, please open an issue — and you can pin the previous release (onelogin-aws-assume-role==1.10.1) in the meantime.

v1.10.1

• Pin onelogin-python-sdk dependency because version 3.0 has breaking changes.

v1.10.0

• Update to latest OneLogin Python SDK and pin it to version 2
• Allow using the OneLogin SAML2 APIs so that IP white listing can take effect (--saml-api-version to set between version 1 and 2)
• Allow setting the IP address used for the SAML assertion via argument (--ip to set the value)

v1.9.0

• #56 Default onelogin config directory to ~/.onelogin
• #54 Support specifying path to config
• Be able to read accounts.yaml from .onelogin or by providing the config path with the -c option
• Prevent None value on saml_response at get_attributes method
• #65 Allow app_id to be set per profile
• Allow otp to be provided by command line with --otp and it will be used on first interaction only

v1.8.1

• Add support for order by Role.
• Fix order by account_id.
• Mark pre-selected aws-account-id or aws-role

v1.8.0

• Sort Account/Role Names on its selection
• Add support for AWS_Role on credentials file
• Refactor account_aliases code to only read the aliases file one time

v1.7.0

• Support cached SAMLResponse.

• Add profiles element in onelogin.aws.json. Allows user to define a set of profiles linked to an account id and role so that they don't need to specify this every time the app is run; it is sufficient to just supply the desired profile.

• Set 'default' as the default profile name

• Make --aws-role-name optional if --aws-account-id is specified Allow only account id to be specified and automatically select role if only 1 role is available in the given account

• Fix use of options.profile when the cli handler is using option.profile_name

• Update OneLogin SDK version

• Relax dependencies