This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 93%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJS%3C/text%3E%3C/svg%3E)
Hello Everyone,
Hope you are doing well. I'm currently having an issue with the aws-azure-login.
I have MFA in my account activated and whenever I try to access my AWS profile I have to do so with the complete command "aws-azure-login --profile foo --mode=debug" or it won't let me access. Anyway, once I can "access" the profile It's never assumed and it's like if nothing ever happened.
If I run the command "aws s3 ls --profile development" It would list the default profile bucket and not the one I'm supposed to be logged in.
Do you have any insight of what might be happening and why the MFA is having issues with the aws-azure-login client?
PS: Co-workers who doesn't have the MFA activated are logging in without issues.
Thank you in advance!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 81%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Do you have any conditional access policies in place?
This is a third party tool so I cannot say for certain, but if you have third party apps disabled via Conditional Access this may be part of your problem. See notes in this thread on third party MFA settings.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 37%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVJ%3C/text%3E%3C/svg%3E)
Aws-azure-login doesn't show number for MFA on screen
I am also available in the MFA environment.
Are you logged in with a specified profile?
aws-azure-login --profile foo
Also try the environment variable AWS_PROFILE.
Also, can you log in correctly when MFA is not enabled in your environment?
You are using the AWS CLI named profile, but have you confirmed that the settings in the profile's configuration file are correct in the first place?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 64%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJS%3C/text%3E%3C/svg%3E)
Hello Takahitolwasa,
Yes, I was logged in with the correct profile and whenever the MFA was not enable I was able to connect to the environment without issues.
Anyway, I found out that the MFA that was not working was the SMS MFA. I changed it to Microsoft Authenticator App and the MFA works now.
The issue that I still had was that the role was assumed but whenever I tried to use the command : aws sts get-caller-identity --query "Account" --output text it would always return the environment arn from my "default" profile.
This was fixed using the environment variable as you pointed out -> AWS_PROFILE.
Thank you for your support!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 15%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFL%3C/text%3E%3C/svg%3E)
Today i'd the same issue at my work simply use:
aws-azure-login --mode=gui