allow non-root roles

greenpau · Apr 22, 2020 · a3844a7 · a3844a7
1 parent d124ad2
commit a3844a7
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/pkg/client/adfs_saml_response.go b/pkg/client/adfs_saml_response.go
@@ -194,10 +194,10 @@ func ParseAwsRole(s string) (*AwsRole, error) {
 	}
 	r.AccountID = roleParts[4]
 	roleNameParts := strings.Split(roleParts[5], "/")
-	if len(roleNameParts) != 2 {
-		return &r, fmt.Errorf("the passed Role name does not match expected format (%d parts): role/<role_name>", len(roleNameParts))
+	if len(roleNameParts) < 2 {
+		return &r, fmt.Errorf("the passed Role name does not match expected format: role/*<role_name>")
 	}
-	r.Name = roleNameParts[1]
+	r.Name = roleNameParts[len(roleNameParts)-1]
 	return &r, nil
 }