Issue with the optional setting [OPTIONAL] Apply the SessionDuration requested by the SAML provider about samltoawsstskeys HOT 2 CLOSED

I guess the label [OPTIONAL] in the options panel could be misleading, since you are required to either choose yes or no. You can't leave it blank. I will remove the [OPTIONAL] label.

Regarding the error:
What you are experiencing here is actually a configuration error at the end of your identity provider (IDP). In the SAML Assertion, your IDP sends along a requested session duration. This requested duration is higher than the maximum allowed duration, configured on the AWS IAM Role. The two of them do not match, so either of them need to be reconfigured to match the other.

The default session duration on AWS side is 3600 (1h). This is what you will get when you set the Apply the SessionDuration requested by the SAML provider setting in the extension's option panel to no. Many AWS Cloud administrators find this 1 hour session duration quite frustrating, therefore they extend the max session duration on the IAM Role. For this reason, yes is the default value for this option, and will remain the default value.

from samltoawsstskeys.

With release 3.3 the OPTIONAL label has been removed.

6283f58#diff-cfe614044d3abb280d27ac2d618f154c41f38f684e455dcf12693a63cf2a2194L28

from samltoawsstskeys.