Re-authenticate with AWS federated ADFS (SAML) credentials when they expire.

Latest Version

Version
1.0.12
Update
August 18, 2015
Size
36.62KiB
Developer
Category
Users
111
Rating
5 ★
Manifest Version
2
Web Store Status
Languages Support
English
See more
Permissions
Cookies
Tabs
Https://*/adfs/ls/*
Https://*.aws.amazon.com/*
Https://*.amazon.com/*
Alarms
Notifications
Storage
See more

Chrome AWS SAML Token Expiry Reminder Extension

>>> UPDATE v1.0.12
- Detect console page as success after posting for reauth, to support Shibboleth (thanks walterking)
- minor improvements

>>> UPDATE v1.0.10
- fixed a stupid bug from previous update which broke re-auth. Sorry.

>>> UPDATE v1.0.9
- fixed bug for authentication with no existing role/credentials
- added an option to not show notification popup
- published to Github (https://github.com/gitlon/CASTER)

>>> WHY
AWS ADFS Federation (SAML) tokens have a maximum expiry of 1 hour.

Until Amazon change this limit, you are forced to re-login every 1 hour to use ADFS credentials for the AWS console and/or APIs. This is annoying.

This CASTER extension automates the re-login, as well as providing an indication of the time remaining until the current AWS credentials expire.

>>> HOW
- look at cookies from the AWS Console websites
- parse out the current user, role and expiry time
- when nearly expired, try to post to the specified ADFS URL to regenerate a SAML token
- then post again, to the common AWS SAML login page, to select the current AWS role
- if successful, the result is another credentialled-login for another 1 hour.

This only works if your credentials are saved - ie that you can navigate to your ADFS page and not be prompted for username and password after the first login.

>>> YOU (THE USER) MUST DO THIS
You MUST enter *your own* organisation's ADFS url, including the AWS role-provider. Eg:

- https://YOURADFS.com/adfs/ls/idpinitiatedsignon?loginToRp=urn:amazon:webservices/

You should also review the default options.

>>> OPTIONS
- Attempt re-authentication as the current user/role?
- Show a Chrome notification before credentials are nearly expired?
- The URL for your organisation's ADFS endpoint
- When (minutes before) to change the icon time text to yellow
- When to change the icon time text to red
- When to show the Chrome notification
- When to attempt to re-authenticate

>>> WHY THESE PERMISSIONS
CASTER only needs permissions to two websites: your ADFS URL, and the standard AWS SAML role-choice page. Because you set your ADFS URL as an option, this can't be declared as a permission request. Therefore the extensions declares a request for \"all websites\". (This will be refined in a later version.)

>>> OTHER DETAILS
- What does CASTER mean?
Chrome AWS SAML Token Expiry Reminder.

- I don't want you to steal my AWS or company passwords!?
CASTER doesn't store any passwords, or collect or send any private data. It gathers from readily-accessible cookies, and reposts using credentials saved by your browser - in the same way that a user would. You can easily review the extension code to confirm that this is the case.

- Organization is spelled wrong in this text!?
Not in Australia.

- This extension looks like it was written by some newbie that only just learned about Chrome Extensions and Javascript!!
Yes.

- Feature XYZ could be done so much better!?
Please contribute: https://github.com/gitlon/CASTER

- Is this an official, supported product?
CASTER is in no way related to, supported by or approved by Amazon, AWS or Amazon Web Services, or any other organisation. It was written by one individual for his own purposes, and is provided to the public without any warranty or guarantee that it is fit for any purpose.

- How do we berate you?
Send questions, comments or whisky to: caster [dot] extension [at] gmail.com.
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx","manifest_version" : 2,"name" : "Chrome AWS SAML Token Expiry Reminder","version" : "1.0.12","description" : "Re-authenticate with AWS federated ADFS (SAML) credentials when they expire.","author" : "gitlon","permissions" : ["cookies", "tabs", "https://*/adfs/ls/*", "https://*.aws.amazon.com/*", "https://*.amazon.com/*", "alarms", "notifications", "storage"],"content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'","icons" : {"16" : "clock.png","48" : "clock.png","128" : "clock.png"},"browser_action" : {"default_icon" : "clock.png","default_title" : "AWS SAML Credentials\Shows minutes until expiry"},"options_ui" : {"page" : "options.html","chrome_style" : true},"background" : {"persistent" : false,"scripts" : ["eventpage.js"]},"omnibox" : {"keyword" : "caster"}}
Read more

How to download and manually install Chrome AWS SAML Token Expiry Reminder extension for Chrome

Looking for a way to install Chrome AWS SAML Token Expiry Reminder extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install Chrome AWS SAML Token Expiry Reminder extensions manually, this article outlines two simple methods to effortlessly install Chrome AWS SAML Token Expiry Reminder extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download Chrome AWS SAML Token Expiry Reminder extension and manually install through Drag &Drop

If you ever need to manually install a Chrome AWS SAML Token Expiry Reminder extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the Chrome AWS SAML Token Expiry Reminder Extension by clicking the "Download CRX" button on the website.

Look for the Chrome AWS SAML Token Expiry Reminder extension you wish to install. Go to the website and download the Chrome AWS SAML Token Expiry Reminder extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for Chrome AWS SAML Token Expiry Reminder extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the Chrome AWS SAML Token Expiry Reminder extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download Chrome AWS SAML Token Expiry Reminder extension for Chrome and install in Developer Mode

This is another method to install Chrome AWS SAML Token Expiry Reminder extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the Chrome AWS SAML Token Expiry Reminder extension file

Select and download the Chrome AWS SAML Token Expiry Reminder extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the Chrome AWS SAML Token Expiry Reminder extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your Chrome AWS SAML Token Expiry Reminder extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the Chrome AWS SAML Token Expiry Reminder extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install Chrome AWS SAML Token Expiry Reminder extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

AWS Extend Switch Roles Extension · Developer Tools 111 82 ★ 82.44KiB

icon

Refined AWS Console Extension · Developer Tools 111 0 ★ 53.19KiB

icon

SAML to AWS STS Keys Conversion Extension · Developer Tools 111 9 ★ 157KiB

icon

AWS Region Color Highlights Extension · Accessibility 111 4 ★ 6.46KiB

icon

2ch-caster Extension · Social & Communication 111 6 ★ 18.75KiB

icon

AWS State Machine JSON Parser Extension · Productivity 111 3 ★ 143KiB

icon

AWS Sidebar Extension · Developer Tools 111 4 ★ 1.34MiB

icon

aws-launcher Extension · Productivity 111 4 ★ 6.28MiB

icon

Real AWS Status Extension · Productivity 111 7 ★ 364KiB

icon

AWS Role Editor Extension · Developer Tools 111 10 ★ 174KiB

icon

AWS Helper Extension · Developer Tools 111 4 ★ 494KiB

icon

AWS SAML Keys Extension · Developer Tools 111 0 ★ 13.78KiB

icon

SAML Assertion to AWS STS Assumption Extension · Developer Tools 111 0 ★ 154KiB

icon

AWS Title Changer Extension · Developer Tools 111 3 ★ 8.87KiB

icon

AWS Menu Colours Extension · Developer Tools 111 4 ★ 23.27KiB

icon

AWS Console Fixes Extension · Developer Tools 111 3 ★ 264KiB

icon

Cloud Pegboard AWS Console Enhancer Extension · Developer Tools 111 8 ★ 1.66MiB

icon

SAMLPeek Extension · Developer Tools 111 3 ★ 17.2KiB

icon

SAML Chrome Panel Extension · Developer Tools 111 54 ★ 183KiB

icon

SAML Message Decoder Extension · Developer Tools 111 32 ★ 450KiB

icon

Console Recorder for AWS Extension · Productivity 111 12 ★ 7.01MiB

icon

Cloud Assistant for Developers and DevOps Extension · Developer Tools 111 1 ★ 1.09MiB

icon

AWS Services Extension · Developer Tools 111 3 ★ 340KiB

icon

SAML DevTools extension Extension · Developer Tools 111 29 ★ 7.85MiB

User reviews

icon

nzspambot (ID: 00000074de54e26d) Voted 5 ★ - Updated 08/17/2015 Great extension; must hve been a very smart Dev to make this one!!!

icon

Lantrix (ID: 000000c8361890f7) Voted 5 ★ - Updated 08/10/2015 No longer stuck with 1 hour AWS SAML sessions... Thanks.