AWS consolemobileapp documentation change
Summary
Added detailed sign-in instructions for IAM Identity Center users including QR code and URL methods, updated federated sign-in process steps, and added recommendations for password managers
Security assessment
The changes document MFA integration and password manager recommendations, which are security best practices, but do not address a specific vulnerability or incident
Diff
diff --git a/consolemobileapp/latest/userguide/getting-started.md b/consolemobileapp/latest/userguide/getting-started.md index 2136d99f9..c3333b867 100644 --- a/consolemobileapp/latest/userguide/getting-started.md +++ b/consolemobileapp/latest/userguide/getting-started.md @@ -75,0 +76,43 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo +**To sign in for the first time as an IAM Identity Center user** + + 1. Sign in using a QR code: + + 1. On your desktop device, navigate to the AWS access portal. + + 2. Open the right sidepanel by choosing **More ways to access AWS**. + + 3. Use your mobile device to scan the **Access the console in the mobile app** QR code. + +###### Note + +If you use an Android device, we recommend using a third-party QR code scanner app or Google Lens to scan the **Access the console in the mobile app** QR code. + + 2. (Optional) Or sign in using a URL: + + 1. In the Console Mobile Application, select **Use a sign in URL**. + + 2. Enter your organization’s sign in URL. This directs you to your organization’s federated sign in page. + +###### Note + +If your organization uses IAM Identity Center, when an administrator creates a user in IAM Identity Center on your behalf an email invitation to join IAM Identity Center containing a one-time password and AWS access portal URL is typically sent to you. + + 3. Enter your organizational credentials (for example, a user name and password). + + 4. Choose **Sign in**. + + 5. If you are asked for a verification code, check your email for it. Then enter or paste the code in the sign-in screen. + +###### Note + +If you have a virtual MFA device or a hardware authenticator enabled for MFA, you will be prompted to enter your MFA code or use your hardware authenticator to verify your identity. + + 6. (Optional) Save your password using your password manager. We recommend doing this step. + + 7. Select an AWS account and role to assume. + + 8. View your home screen. + + + + @@ -78 +121,3 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo - 1. In the Console Mobile Application, select **Use a Federated URL**. + 1. In the Console Mobile Application, select **Use a sign in URL**. + + 2. Enter your organization’s sign in URL. This directs you to your organization’s federated sign in page. @@ -80 +125,3 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo - 2. Enter your organization’s federated URL. This directs you to your organization’s federated sign in page. +###### Note + +If your organization uses a federated or third-party identity provider like Windows Active Directory, Okta, or Salesforce Identity, contact your administrator to get your sign in URL. @@ -82 +129,3 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo - 3. Enter your federated AWS identity information. + 3. Enter your organizational credentials (for example, a user name and password). + + 4. Choose **Sign in**. @@ -84 +133 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo - 4. (Optional) Enable biometric authentication. + 5. If you are asked for a verification code, check your email for it. Then enter or paste the code in the sign-in screen. @@ -90 +139 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo - 5. Choose **Sign in**. + 6. (Optional) Save your password using your password manager. We recommend doing this step. @@ -92 +141 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo - 6. (Optional) Save your password using your password manager. + 7. Select an AWS account and role to assume. @@ -94 +143 @@ If you have a virtual MFA device or a hardware authenticator enabled for MFA, yo - 7. View your home screen. + 8. View your home screen.