install

Additional install commands

macOS

Homebrewverified · 100%

brew install saml2aws

local Homebrew formula metadata

MacPortsverified · 94%

sudo port install saml2aws

MacPorts ports tree · security/saml2aws/Portfile · source: api.github.com

Linux

Nixverified · 92%

nix profile install nixpkgs#saml2aws

nixpkgs package indexes · pkgs/by-name/sa/saml2aws/package.nix · source: api.github.com

Windows

Chocolateyverified · 92%

choco install saml2aws

Chocolatey community package catalog · saml2aws · source: community.chocolatey.org

Scoopverified · 92%

scoop install main/saml2aws

Scoop official bucket manifest trees · bucket/saml2aws.json · source: api.github.com

Windows Package Managerverified · 92%

winget install --id Versent.saml2aws -e

Windows Package Manager source index · Versent.saml2aws · source: cdn.winget.microsoft.com

overview

Package summary

Login and retrieve AWS temporary credentials using a SAML IDP

Project links

Commands and aliases

saml2aws

history

Project history and usage

saml2aws is a cross-platform CLI that signs in through a SAML identity provider and obtains temporary AWS credentials for a selected role.

Project history

The project was developed by Versent to authenticate against a SAML identity provider, select an AWS role, request temporary STS credentials, and store or emit those credentials in forms understood by AWS tooling.

A 2017 version-2 refactor introduced the current `~/.saml2aws` account-oriented configuration model and reorganized provider implementations to support richer MFA and provider-specific settings.

Adoption history

saml2aws is packaged across Homebrew, MacPorts, Nix, Chocolatey, Scoop, and winget, reflecting use on both Unix-like developer machines and Windows corporate workstations.

Its continued 2.x release series and wide provider support established it as a common bridge for organizations whose AWS console access predates or sits outside newer AWS-native SSO tooling.

How it is used

Users define one or more IdP accounts with `saml2aws configure`, then run `saml2aws login` to authenticate, choose a role, and write temporary credentials to an AWS profile.

The CLI can instead emit shell variables, run a child command with credentials, or act as an AWS `credential_process`. It supports multiple SAML providers, MFA methods, configurable credential files, and optional SAML assertion caching.

Why package nerds care

saml2aws turns an interactive enterprise SAML login into short-lived, profile-compatible AWS credentials. Package enthusiasts value it as glue between identity-provider workflows, the conventional AWS shared-credentials format, shells, SDKs, and automation tools.

Timeline

2017: The version-2 configuration and provider refactor was planned around `~/.saml2aws`
2022: Version 2.35.0 was distributed through Homebrew during the mature 2.x line
2025: Version 2.36.19 shipped cross-platform binaries

Related projects

AWS CLI
AWS Security Token Service
AWS shared credentials and config files
AWS credential_process

Sources

Official 2.0 design issue: https://github.com/Versent/saml2aws/issues/69
Official README: https://github.com/Versent/saml2aws#readme
Official provider documentation: https://github.com/Versent/saml2aws/tree/master/doc/provider
Official releases: https://github.com/Versent/saml2aws/releases

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

narrow executable package without higher-risk signals

Signals

metadata:no-higher-risk-signals

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
Homebrew bottle metadata is available for 8 platform targets.
Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: ~/.saml2aws

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: ~/.aws/credentials~/.aws/config~/.aws/saml2aws/*

executables

Installed executables

Command	Kind	Exposure	Note
`saml2aws`	cli	global executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-09-19

manager version2.36.19

manager updated2026-09-15

local dataok

upstreamcurrent

latest detectedv2.36.19

https://github.com/Versent/saml2aws

okNo freshness warnings were generated.

install metadata

Package metadata

Package key	brew:saml2aws
Version	2.36.19
Package manager	Homebrew
Package manager page	https://formulae.brew.sh/formula/saml2aws
Homepage	https://github.com/Versent/saml2aws
Repository	https://github.com/Versent/saml2aws
License	MIT
Source archive	https://github.com/Versent/saml2aws/archive/refs/tags/v2.36.19.tar.gz
Last updated	2026-09-15T05:47:16+02:00
Pulse	updated
Build dependencies	go
Bottle	available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux)
Homebrew post-install	not defined
Service	none declared

registry facts

Source database details

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	saml2aws
Version Scheme	0
Revision	0
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

saml2aws

nix profile install nixpkgs#saml2aws

normalized package name match
Matched by: Saml2aws

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/sa/saml2aws/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

MacPorts95%

saml2aws

sudo port install saml2aws

normalized package name match
Matched by: Saml2aws

MacPorts ports tree · api.github.com · MacPorts ports tree: security/saml2aws/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

Chocolatey95%

saml2aws

choco install saml2aws

normalized package name match
Matched by: Saml2aws

Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: saml2aws from https://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','ryujinx'

Scoop95%

main/saml2aws

scoop install main/saml2aws

normalized package name match
Matched by: Saml2aws

Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/saml2aws.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

winget95%

Versent.saml2aws

winget install --id Versent.saml2aws -e

normalized package name match
Matched by: Saml2aws

Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Versent.saml2aws from https://cdn.winget.microsoft.com/cache/source.msix

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/saml2aws.yml

Used sources

Geiger risk classifier
cross-ecosystem install command graph
curated configuration and credential file locations
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment
pkg.so package database
pkgdb category and tag curation

Install saml2aws with Homebrew, chocolatey, MacPorts, Nix, scoop, winget

Additional install commands

macOS

Linux

Windows

Package summary

Project links

Commands and aliases

Project history and usage

Project history

Adoption history

How it is used

Why package nerds care

Timeline

Related projects

Sources

Risk level: green

Risk classifier

Why

Signals

Install behavior

Recommended review

Configuration and credential file locations

Configuration files

Credential files

Installed executables

Version and freshness

Package metadata

Source database details

Other package-manager records

Internal package links

Topical hubs

Related tools

Same workflow

Agent security guides

Generated from repository data

Combined YAML source

Used sources