From f87f74c65cf947ca9ceca29864b9c1e6c01f3d14 Mon Sep 17 00:00:00 2001 From: Marc Barlo Date: Wed, 23 Jan 2019 16:51:44 -0800 Subject: [PATCH] Add some action items for the credentials error message --- lib/okta.go | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lib/okta.go b/lib/okta.go index a2f0cb32..5459c849 100644 --- a/lib/okta.go +++ b/lib/okta.go @@ -101,7 +101,7 @@ func NewOktaClient(creds OktaCreds, oktaAwsSAMLUrl string, sessionCookie string, } else if creds.Domain != "" { domain = creds.Domain } else { - return &OktaClient{}, errors.New("either creds.Organization (deprecated) or creds.Domain must be set, and not both") + return &OktaClient{}, errors.New("either creds.Organization (deprecated) or creds.Domain must be set, but not both. To remedy this, re-add your credentials with `aws-okta add`") } // url parse & set base @@ -526,9 +526,9 @@ func (p *OktaProvider) Retrieve() (sts.Credentials, string, error) { } newCookieItem := keyring.Item{ - Key: p.OktaSessionCookieKey, - Data: []byte(newSessionCookie), - Label: "okta session cookie", + Key: p.OktaSessionCookieKey, + Data: []byte(newSessionCookie), + Label: "okta session cookie", KeychainNotTrustApplication: false, }