This account does not have access to any roles

Running ver 0.11.0, I appear to be authenticating successfully (ADFS 3.0 w/ DUO), but get the following:

Sending request for authentication
Waiting for additional authentication
Going for aws roles
...
2018-05-30 08:17:11,462 [account_aliases_fetcher account_aliases_fetcher.py:account_aliases] [7444-MainProcess] [140735887676288-MainThread] - DEBUG: Found SAML account name: Account: miengsrv (<account_num>)
2018-05-30 08:17:11,462 [authenticator authenticator.py:authenticate] [7444-MainProcess] [140735887676288-MainThread] - DEBUG: Roles along with principals found after authentication: {}
This account does not have access to any roles

The DEBUG logs show the roles, but I’m never prompted to choose:

    <div  class="saml-account"> <div onClick="expandCollapse(0);">
              <img id="image0" src="/static/image/down.png" valign="middle"></img>
              <div class="saml-account-name">Account: miengsrv (<account_num>)</div>
              </div>
              <hr style="border: 1px solid #ddd;">
     <div id="0" class="saml-account" >
                <div class="saml-role" onClick="checkRadio(this);">
                    <input type="radio" name="roleIndex" value="arn:aws:iam::<account_num>:role/engsvcs" class="saml-radio" id="arn:aws:iam::<account_num>:role/engsvcs" />
                    <label for="arn:aws:iam::<account_num>:role/engsvcs" class="saml-role-description">engsvcs</label>
                    <span style="clear: both;"></span>
                </div>

                <div class="saml-role" onClick="checkRadio(this);">
                    <input type="radio" name="roleIndex" value="arn:aws:iam::<account_num>:role/engsvcs-ro" class="saml-radio" id="arn:aws:iam::<account_num>:role/engsvcs-ro" />
                    <label for="arn:aws:iam::<account_num>:role/engsvcs-ro" class="saml-role-description">engsvcs-ro</label>
                    <span style="clear: both;"></span>
                </div>
                 </div></div>

Any guidance would be appreciated.

Thanks!

[jbuettnerbild]

I had the same problem. With --no-sspi its works.

[RahulKamboj21]

for us, it was happening in aws-adfs, because, my password was expired and when we used a new one, it worked!!.