AWS Security ChangesHomeSearch

AWS consolemobileapp documentation change

Service: consolemobileapp · 2025-03-19 · Documentation low

File: consolemobileapp/latest/userguide/getting-started.md

Summary

Added detailed sign-in instructions for IAM Identity Center users including QR code and URL methods, updated federated sign-in process steps, and added recommendations for password managers

Security assessment

The changes document MFA integration and password manager recommendations, which are security best practices, but do not address a specific vulnerability or incident

Diff

diff --git a/consolemobileapp/latest/userguide/getting-started.md b/consolemobileapp/latest/userguide/getting-started.md
index 2136d99f9..c3333b867 100644
--- a/consolemobileapp/latest/userguide/getting-started.md
+++ b/consolemobileapp/latest/userguide/getting-started.md
@@ -75,0 +76,43 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo
+**To sign in for the first time as an IAM Identity Center user**
+
+  1. Sign in using a QR code:
+
+    1. On your desktop device, navigate to the AWS access portal.
+
+    2. Open the right sidepanel by choosing **More ways to access AWS**.
+
+    3. Use your mobile device to scan the **Access the console in the mobile app** QR code.
+
+###### Note
+
+If you use an Android device, we recommend using a third-party QR code scanner app or Google Lens to scan the **Access the console in the mobile app** QR code.
+
+  2. (Optional) Or sign in using a URL:
+
+    1. In the Console Mobile Application, select **Use a sign in URL**.
+
+    2. Enter your organization’s sign in URL. This directs you to your organization’s federated sign in page.
+
+###### Note
+
+If your organization uses IAM Identity Center, when an administrator creates a user in IAM Identity Center on your behalf an email invitation to join IAM Identity Center containing a one-time password and AWS access portal URL is typically sent to you.
+
+  3. Enter your organizational credentials (for example, a user name and password).
+
+  4. Choose **Sign in**.
+
+  5. If you are asked for a verification code, check your email for it. Then enter or paste the code in the sign-in screen.
+
+###### Note
+
+If you have a virtual MFA device or a hardware authenticator enabled for MFA, you will be prompted to enter your MFA code or use your hardware authenticator to verify your identity.
+
+  6. (Optional) Save your password using your password manager. We recommend doing this step.
+
+  7. Select an AWS account and role to assume.
+
+  8. View your home screen.
+
+
+
+
@@ -78 +121,3 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo
-  1. In the Console Mobile Application, select **Use a Federated URL**.
+  1. In the Console Mobile Application, select **Use a sign in URL**.
+
+  2. Enter your organization’s sign in URL. This directs you to your organization’s federated sign in page.
@@ -80 +125,3 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo
-  2. Enter your organization’s federated URL. This directs you to your organization’s federated sign in page.
+###### Note
+
+If your organization uses a federated or third-party identity provider like Windows Active Directory, Okta, or Salesforce Identity, contact your administrator to get your sign in URL.
@@ -82 +129,3 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo
-  3. Enter your federated AWS identity information.
+  3. Enter your organizational credentials (for example, a user name and password).
+
+  4. Choose **Sign in**.
@@ -84 +133 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo
-  4. (Optional) Enable biometric authentication.
+  5. If you are asked for a verification code, check your email for it. Then enter or paste the code in the sign-in screen.
@@ -90 +139 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo
-  5. Choose **Sign in**.
+  6. (Optional) Save your password using your password manager. We recommend doing this step.
@@ -92 +141 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo
-  6. (Optional) Save your password using your password manager.
+  7. Select an AWS account and role to assume.
@@ -94 +143 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo
-  7. View your home screen.
+  8. View your home screen.