Nicolò Marchesi Thank you for clarifying. I realized your script is doing exactly what I want to do, minus the Session Timeout attribute. That helped me make progress but ran into an error: "TypeError: string indices must be integers" when trying to apply values from "update_saml_attributes." Any ideas on where I need to start looking?

Thanks for writing up this article and project. I got lost on the federation and custom schema files. Is the federation file supposed to list the accounts you want to modify? What would you do if you have a custom attribute that requires a value. For example AWS AppStream requires an attribute AWSAttribute with a multi-value field AppStreamCAD .