diff --git a/background/script.js b/background/script.js
index 0678371..000b336 100644
--- a/background/script.js
+++ b/background/script.js
@@ -138,7 +138,8 @@ function extractPrincipalPlusRoleAndAssumeRole(samlattribute, SAMLAssertion) {
 			var docContent = "[default] \n" +
 			"aws_access_key_id = " + data.Credentials.AccessKeyId + " \n" +
 			"aws_secret_access_key = " + data.Credentials.SecretAccessKey + " \n" +
-			"aws_session_token = " + data.Credentials.SessionToken;
+			"aws_session_token = " + data.Credentials.SessionToken + " \n" +
+			"aws_security_token = " + data.Credentials.SessionToken;
 
 			// If there are no Role ARNs configured in the options panel, continue to create credentials file
 			// Otherwise, extend docContent with a profile for each specified ARN in the options panel
@@ -174,7 +175,8 @@ function assumeAdditionalRole(profileList, index, AccessKeyId, SecretAccessKey,
 			"[" + profileList[index] + "] \n" +
 			"aws_access_key_id = " + data.Credentials.AccessKeyId + " \n" +
 			"aws_secret_access_key = " + data.Credentials.SecretAccessKey + " \n" +
-			"aws_session_token = " + data.Credentials.SessionToken;
+			"aws_session_token = " + data.Credentials.SessionToken + " \n" +
+			"aws_security_token = " + data.Credentials.SessionToken;
 		}
 		// If there are more profiles/roles in the RoleArns dict, do another call of assumeAdditionalRole to extend the docContent with another profile
 		// Otherwise, this is the last profile/role in the RoleArns dict. Proceed to creating the credentials file