AWS singlesignon documentation change

Service: singlesignon · 2025-04-18 · Documentation medium

File: singlesignon/latest/userguide/attributemappingsconcept.md

Summary

Modified Active Directory attribute mappings including username format change from samaccountname to userprincipalname

Security assessment

Attribute mapping updates without explicit security context, though UPN changes could impact authentication flows

Diff

diff --git a/singlesignon/latest/userguide/attributemappingsconcept.md b/singlesignon/latest/userguide/attributemappingsconcept.md
index 1e4aaf84f..e5ac56fde 100644
--- a//singlesignon/latest/userguide/attributemappingsconcept.md
+++ b//singlesignon/latest/userguide/attributemappingsconcept.md
@@ -52,0 +53 @@ User attribute in IAM Identity Center  | Maps to this attribute in your Active D
+`displayname` | `${displayname}`  
@@ -58 +59 @@ User attribute in IAM Identity Center  | Maps to this attribute in your Active D
-`username` | `${samaccountname}@{associateddomain}`  
+`username` | `${userprincipalname}`  
@@ -85,11 +86,6 @@ Supported attributes in your Microsoft AD directory
-`${dir:email}`  
-`${dir:displayname}`  
-`${dir:distinguishedName}`  
-`${dir:firstname}`  
-`${dir:guid}`  
-`${dir:initials}`  
-`${dir:lastname}`  
-`${dir:proxyAddresses}`  
-`${dir:proxyAddresses:smtp}`  
-`${dir:proxyAddresses:SMTP}`  
-`${dir:windowsUpn}`  
+`${initials}`  
+`${mail}`  
+`${displayname}`  
+`${distinguishedname}`  
+`${proxyaddresses[?type == "SMTP"].value}`  
+`${proxyaddresses[?type == "smpt"].value}`