aws-cli icon indicating copy to clipboard operation
aws-cli copied to clipboard

Add CLI option for removing SSO configuration

Open Neven1986 opened this issue 1 month ago • 1 comments

Describe the feature

The feature should allow removing of SSO configuration from the configuration file without manual intervention and provide an option to do it through CLI.

Use Case

Since SSO is sometimes colliding with other means of authentication, it needs to be removed from the configuration file. Currently this is only possible by manually removing configurations artifacts from the configuration files. Since this manual approach is prone to errors, it would be beneficial to have an option which does this for the customer.

Proposed Solution

Introduce an new option which would remove profile SSO artifacts from the configuration file.

aws configure sso [--profile name] remove/unset

Other Information

No response

Acknowledgements

  • [ ] I may be able to implement this feature request
  • [ ] This feature might incur a breaking change

CLI version used

2.31.38

Environment details (OS name and version, etc.)

MacOS 15.7.2 (24G325)

Neven1986 avatar Nov 25 '25 14:11 Neven1986

Hi @Neven1986, thanks for this feature request. The team reviewed this, agreed it has value, and have a couple clarifying questions before we leave this open for tracking.

  • My interpretation of this is that you want a command that removes sso_sesssion, sso_account_id, and sso_role_name from a profile while retaining the other config options in that profile, and deletes the corresponding sso-session section completely. Is that correct?
  • Is there a reason you specified SSO configurations, rather than the more general option to remove any profile?

RyanFitzSimmonsAK avatar Dec 01 '25 21:12 RyanFitzSimmonsAK