# Add AWS profiles in ~/.aws/config
granted sso populate --sso-region eu-west-1 https://yourawsssosubdomain.awsapps.com/start
# Login in shell
assume
# Check who you're logged in as
aws sts get-caller-identity
# Login in browser
assume -c
# Export to ~/.aws/credentials (if some CLI thing doesn't support AWS SSO)
assume role-a --export
Add the extension too https://chromewebstore.google.com/detail/granted/cjjieeldgoohbkifkogalkmfpddeafcm