Feature request: AWS Client VPN (macOS) should reuse the SAML session instead of opening the browser on every reconnect

Thank you for sharing this detailed feedback about the AWS Client VPN macOS client's SAML authentication behavior. I understand the frustration with the browser opening on every reconnect, especially with keepalive reconnects throughout the day, and the focus-stealing issue this creates.

Your observations about session reuse are valuable. The current implementation does open the browser for each authentication attempt, which can be disruptive to workflow. Your approach of using an embedded WebView with persistent cookies to enable silent reauthentication when the IdP session is still valid sounds like a practical improvement that would significantly enhance the user experience.

The issue you've identified with multiple profiles on the same Google IdP—where the second connection experiences AUTH_FAILED for approximately 30 seconds due to Google replaying a cached assertion—is also a specific technical challenge worth addressing.

To submit this as a feature request, I recommend adding detailed correspondence through the AWS Support Center at https://console.aws.amazon.com/support/. Include the technical details you've provided here: the environment (macOS 13+, Apple Silicon, Google Workspace SAML federation), the specific behavior you're observing, and your proposed solution with the embedded WebView approach. This will help the AWS Client VPN team evaluate the feasibility of implementing session reuse and addressing the multi-profile authentication timing issue.

Your feedback helps improve the service for all users experiencing similar challenges with SAML-based authentication workflows.
Sources
AWS Client VPN for macOS release notes - AWS Client VPN
Client authentication in AWS Client VPN - AWS Client VPN