Generate temporary AWS credentials via Okta.

NOTE: Advanced users may shorten the tokendito interaction to a single command.

Use tokendito to generate temporary AWS credentials via Okta for programmatic authentication to AWS. Tokendito signs you in to Okta and uses your existing AWS integration to broker your SAML assertion into your AWS accounts, returning STS tokens into your local ~/.aws/credentials file.

• Python 2.7.10+
• Your AWS account is federated in Okta

tokendito is compatible with both python 2 and 3, and can be installed with either pip or pip3.

1. Install (via PyPi): pip install tokendito
2. Run tokendito --configure.
3. Run tokendito.

Have multiple Okta tiles to switch between? View our multi-tile guide.