Setting up MFA using touch id for AWS SSO

Using touch id with AWS SSO


2021 was year of many challenges but one really nice positive was the opportunity to purchase a 5 bedroom family home that allowed my wife and 2 boys a bit more space.

However, moving from a 2 bedroom townhouse, where most major maintenance is sorted by strata, to a 450 square meter block with hedges and gardens means I’ll need to upgrade some of my tools to handle the additional work.

![Picture of the front hedge](/img/blog/garden-lights/front-hedge.jpeg)

This blog series attempts to answer the question, what do you really need to keep a reasonably sized Sydney property in good nick.

Posts:

- [Garden Tools](http://peterhanssens.com.au/blog/2022-01/garden-tools.md)


Keep checking periodically for more posts in the "Home" series

I recently bought a new family home and this documents my adventure with it!

We bought a new family home


So a fellow AWS Hero recently tweeted that TouchID is now supported by AWS SSO, so of course, I wanted to give this a quick go:

<div class="center">

<blockquote class="twitter-tweet"><p lang="en" dir="ltr">I have MAJOR and BREAKING news: TouchID is now supported by AWS SSO as a MFA device when using Safari 🎉🎉🎉<br><br>Previously you could only use it from Chrome, but now it works from Safari too!</p>&mdash; Vlad Ionescu (he/him) (@iamvlaaaaaaad) <a href="https://twitter.com/iamvlaaaaaaad/status/1466747612674105350?ref_src=twsrc%5Etfw">December 3, 2021</a></blockquote> <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

</div>

## Configuring multi factor auth

First up, I have to go to my Master account within the organisation, navigate to AWS SSO and tick security keys and built-in authenticators: 
![](/img/blog/touch-id-with-aws-sso/configure-multi-factor-auth.png)

## SSO MFA Devices
Next I head on over to login to AWS SSO and click on MFA Devices where I'm presented with a Register Device button: 
![](/img/blog/touch-id-with-aws-sso/mfa-devices.png)


## Register MFA Device
After clicking the register device button, I'm presented a dialog box with 3 options and of course, I'll choose the built-in authenticator for the Apple TouchId and follow the prompts to set it up: 
![](/img/blog/touch-id-with-aws-sso/register-mfa-device.png)

And that's it - log out and log back in with all that TouchId goodness - sooo good!




If you are here, then you've probably heard that I run a couple of tech meetups in Sydney and beyond. The three meetups I run in Sydney are:

- [Sydney Serverless](https://www.meetup.com/Sydney-Serverless-Meetup-Group/ "Sydney Serverless")
- [Sydney DataEng](https://www.meetup.com/Sydney-Data-Engineering-Meetup/ "Sydney DataEng")
- [Sydney dbt](https://www.meetup.com/Sydney-dbt-Meetup/ "Sydney dbt")

I've been organising meetups for roughly 4-5 years and in that time, I've built up a couple of tricks that help me save time when finding new speakers.

## Get structured data

There are four simple questions I ask prospective meetup speakers, and they are the following:

- name, job title, company
- talk title
- talk summary
- bio

Now that may not sound like a lot of info but it can be very revealing about who your speaker is and whether they are a good fit for your meetup as well as how ready they are to present.

It is also a great time saver as I pretty much copy and paste the information into the meetup page! :D

## Job title and company

A job title and company can very quickly tell you a lot about a speaker - I don't mean this from an elitist perspective - far from it in fact as no one at a tech meetup wants to hear from a c-suite executive, far removed from the tools. A job title can give away hints about how day to day this person is on the tech they are talking about as well as potential red flags if they are someone in sales or recruitment who may not have the best interest of the meetup community at heart.

## talk title and summary

Someone who can quickly rattle these details off in a succinct manner typically will have a very good idea of what they will present and are often ready at short notice. Watch points are verbose summaries and scattered thoughts - anything that screams a disjointed story, and you may want to get back to that speaker and provide further coaching until they have clarity in their summary.

## bio

This will often indicate whether a speaker has done this before or not (or is a regular on the speaking circuit). I'm not put off in the slightest by a bio that isn't very well crafted (or is clearly from a junior). Getting newcomers to present at your meetup is what it's all about and is another coaching point for a generous organiser.

## Final thoughts

I hope you found this post insightful - it's perhaps not the most complicated thing you will read today but I hope this little nugget of wisdown can save you some time.



I've seen a lot of meetup talks over the years, and this is how I assess them

December 6, 2021Using touch id with AWS SSO