Extraction of AWS role ARN fail when role is not the 1st argument

[yakireliyahu87]

Hey,
According to onelogin documentation, the "Role" Macro consists out of the role ARN and the SAML provider ARN, however, it works even if the order is reversed (i.e. SAML provider ARN and then the role ARN)

In my case I specified the SAML provider first, and got this error:

botocore.exceptions.ClientError: An error occurred (ValidationError) when calling the AssumeRoleWithSAML operation: Request ARN is invalid

Once i changed the order in the Macro, I manage to assume the role successfully.