saml2aws is a command-line client that obtains temporary AWS credentials through a SAML identity provider. It exchanges a selected AWS role and SAML assertion with AWS Security Token Service and saves the resulting credentials to an AWS profile. The tool supports multiple identity providers, provider-specific multifactor authentication, and configuration for multiple accounts and roles.