Troubleshooting Safari Authorization Issue with duploctl jit aws

Safari Authorization Issue with duploctl jit aws Applies to: Mac users using duploctl with Safari or Brave Last Updated: May 6, 2025 Related Tooling: duploctl , duplo-jit , AWS JIT Access Problem: When using the following command to start a JIT AWS session: duploctl jit aws --interactive --tenant <tenant_name> --host <duplo_portal_host_url> --token ${DUPLO_TOKEN} Safari (and Brave) users may experience a non-functional "Authorize" button on the DuploCloud web prompt. Solution: Use the updated duplo-jit CLI instead of duploctl . This CLI includes a fix for the Safari/Brave browser issue. Step 1: Install or Upgrade duplo-jit brew install duplocloud/tap/duplo-jit or, if already installed brew upgrade duplo-jit Step 2: Run the JIT Session with duplo-jit duplo-jit aws --tenant <tenant_name> --no-cache --host <duplo_portal_host_url> --interactive This version works across all browsers, including Safari. Optional: Clean Output of the AWS Console URL If you have jq installed, you can simplify the output: duplo-jit aws --tenant <tenant_name> --no-cache --host <duplo_portal_host_url> --interactive | jq -r .ConsoleUrl Notes:

• This issue was resolved in the duplo-jit CLI as of March 2025.