adding additional debug/error information

dkujawski · Jan 31, 2020 · bf3f799 · bf3f799
1 parent 2438989
commit bf3f799
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/lib/okta.go b/lib/okta.go
@@ -261,6 +261,7 @@ func (o *OktaClient) AuthenticateProfile3(profileARN string, duration time.Durat
 	}
 
 	// retrieve IAM Roles
+	log.Debug("Step: 3.1")
 	principal, role, err := GetRoleFromSAML(assertion.Resp, profileARN)
 	if err != nil {
 		return sts.Credentials{}, oc, err

diff --git a/lib/utils.go b/lib/utils.go
@@ -27,6 +27,7 @@ func GetRoleFromSAML(resp *saml.Response, profileARN string) (string, string, er
 	if err != nil {
 		return "", "", err
 	}
+	log.Debugf("Found roles from SAML: %#v", roles)
 	role, err := GetRole(roles, profileARN)
 	if err != nil {
 		return "", "", err
@@ -91,7 +92,7 @@ func GetRole(roleList saml.AssumableRoles, profileARN string) (saml.AssumableRol
 				return arole, nil
 			}
 		}
-		return saml.AssumableRole{}, fmt.Errorf("ARN isn't valid")
+		return saml.AssumableRole{}, fmt.Errorf("ARN isn't valid %s", profileARN)
 	}
 
 	// if the user only has one role assume that role without prompting.