Problems with Google Prompts

Few of the user in my company face problem where they get a Google Prompt on their phone while attempting to login, but on the terminal, they get the following error:

Error::root: SAML lookup failed, storing failure page to 'saml.html' to assist with debugging.

The failure page aka saml.html says "Confirm if it was you/your device or not." with "Yes" or "No"

Does anyone know why Google behaves as such with few selected users?

However, I figured out that this issue can be bypassed by removing Google Account from the phone which disabled Google Prompts and the tool aws-google-auth fallback to secondary 2FA methods like SMS-code or Captcha.

Any help or guidance to fix this on Google or aws-google-auth side is much appreciated.

[tomcolaa]

Also facing the same issue since last week and also getting the same debug html screenshot. Already tried to reset my password and change the 2FA method but Google doesn’t allow it.

TEMPORARY SOLUTION EDIT (13.10.2020) I found a solution that worked for me

1. Go to your Google Account > Security > Devices
2. Log out from your phone (Remove Phone)
3. Go to Security > 2FA and set up 2FA with the Authenticator App
4. Open a Chrome Incognito Window -> Sign In with your Google Account using the 2FA Authenticator App and check the box remember this PC
5. Go back to VSCode and run your aws-google-auth command as usual. It should now ask your for an MFA token from your Authenticator App. Make sure you have enough time left until the code gets invalidated and enter the code.

The problem is as soon as you log in on your phone again, 2FA will jump back to phone prompts. Therefore you can’t log back in your phone in your google account.

Cheers!

[unstoppablecarl]

I just set this up for the first time with version aws-google-auth 0.0.37 and am having the same problems described above.