# Install okta-awscli with Homebrew Okta authentication for awscli. Version 0.5.5 via Homebrew; verified 2026-05-14. ## Install ```sh sudo av install brew:okta-awscli ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install okta-awscli ``` Evidence: local Homebrew formula metadata ## Package facts - **Package key:** brew:okta-awscli - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.5.5 - **Source summary:** Okta authentication for awscli - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-05-14T09:56:38Z - **Generated:** 2026-07-08T18:08:21+00:00 ## Executables - okta-awscli (cli) - okta-awscli (alias) ## Dependencies - certifi - python@3.14 ## Install behavior - Post-install hook: not defined - Bottle: available on all ## Freshness - Page generated: 2026-07-08 - Package-manager version: 0.5.5 - Package-manager updated: 2026-05-14 - Local data: ok - Upstream repository: https://github.com/okta-awscli/okta-awscli - info: No cached GitHub release or tag data was available. ## Project history and usage okta-awscli is a Python command-line bridge between Okta SSO and AWS command-line credentials. It authenticates a user with Okta, obtains a SAML assertion, and exchanges that assertion for temporary AWS STS credentials that can be used by awscli, boto, boto3, and other AWS API tooling. ### Project history The GitHub repository was created on 2017-07-22. Its README positions the project as a successor-style implementation inspired by nimbusscale/okta_aws_login, with the important design difference that okta-awscli uses Okta APIs during authentication rather than scraping and parsing HTML. ### Adoption history The package sits in the long-running niche of enterprise AWS federation helpers. Okta developer forum threads from 2017 and AWS documentation for AssumeRoleWithSAML show the underlying need: organizations wanted AWS CLI access without distributing long-lived IAM user keys, using a corporate identity provider and AWS STS instead. ### How it is used Operators configure Okta and AWS profile details in a local okta-awscli configuration file, then run the executable to populate or refresh AWS credential material. The practical workflow is less about general Okta administration and more about making federated, MFA-backed AWS access feel like normal AWS CLI profile usage. ### Why package nerds care For package nerds, okta-awscli is a good example of a small package that encodes an enterprise identity pattern: browser SSO and SAML federation collapsed into a repeatable CLI credential flow. Its continued Homebrew packaging also records the era before vendor-provided AWS federation CLIs fully absorbed this use case. ### Timeline - 2017-07-22: The okta-awscli/okta-awscli repository was created on GitHub. - 2018-2024: Public issues and packaging activity show maintenance around Okta MFA behavior, Python dependencies, macOS certificate handling, and AWS credential edge cases. - 2026-07-01: GitHub repository metadata reported 314 stars, 144 forks, Python as the primary language, and Apache-2.0 licensing. ### Related projects - Related tools include nimbusscale/okta_aws_login, Okta's community-supported okta-aws-cli-assume-role, and Okta's separate okta-aws-cli project. AWS STS AssumeRoleWithSAML is the underlying AWS operation that makes the pattern possible. ### Sources - - - - - - - ## Security Notes No matching local secret-handling manifest was found for okta-awscli. Nucleus package metadata is still published here so future coverage has a stable package URL. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.okta-aws ## Credential files - Unix: ~/.aws/credentials, ~/.okta-credentials.cache ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** okta-awscli - **Version Scheme:** 0 - **Revision:** 9 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Related links - [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [python@3.14](https://www.automicvault.com/pkg/brew/python-3-14/) - Runtime dependency declared by Homebrew. - [okta-aws-cli](https://www.automicvault.com/pkg/brew/okta-aws-cli/) - Shares av.db curated category or tags: aws, cli, identity, okta, security. - [dexidp](https://www.automicvault.com/pkg/brew/dexidp/) - Shares av.db curated category or tags: cli, identity, security. - [opensaml](https://www.automicvault.com/pkg/brew/opensaml/) - Shares av.db curated category or tags: cli, identity, security. - [spiffe-helper](https://www.automicvault.com/pkg/brew/spiffe-helper/) - Shares av.db curated category or tags: cli, identity, security. - [cfripper](https://www.automicvault.com/pkg/brew/cfripper/) - Shares av.db curated category or tags: aws, cli, security. - [chamber](https://www.automicvault.com/pkg/brew/chamber/) - Shares av.db curated category or tags: aws, cli, security. - [cliam](https://www.automicvault.com/pkg/brew/cliam/) - Shares av.db curated category or tags: aws, cli, security. - [cloudfox](https://www.automicvault.com/pkg/brew/cloudfox/) - Shares av.db curated category or tags: aws, cli, security. - [parliament](https://www.automicvault.com/pkg/brew/parliament/) - Both packages touch the same language runtime or ecosystem. Shared terms: aws, cli, python, python-3-14, security. - [principalmapper](https://www.automicvault.com/pkg/brew/principalmapper/) - Both packages touch the same language runtime or ecosystem. Shared terms: aws, cli, python, python-3-14, security. ## Combined YAML source View the package source record on GitHub. [combined/okta-awscli.yml](https://github.com/automic-vault/db/blob/main/combined/okta-awscli.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - cross-ecosystem install command graph